tocsin

Debian/groff: unknown

contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.

Action: Upgrade groff to 1.20.1-5 or later.

Affected

introducedfixedlast affected
01.20.1-5-

Fixed versions

1.20.1-5

Sources

published · modified · JSON