Debian/xfig: unknown
Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-
Action: Upgrade xfig to 1:3.2.5.a-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:3.2.5.a-1 | - |
Fixed versions
| 1:3.2.5.a-1 |
Sources
published · modified · JSON