tocsin

Debian/pulseaudio: unknown

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### t

Action: Upgrade pulseaudio to 0.9.21-1.1 or later.

Affected

introducedfixedlast affected
00.9.21-1.1-

Fixed versions

0.9.21-1.1

Sources

published · modified · JSON