tocsin

Debian/postfix: unknown

The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink at

Action: Upgrade postfix to 2.6.5-3 or later.

Affected

introducedfixedlast affected
02.6.5-3-

Fixed versions

2.6.5-3

Sources

published · modified · JSON