tocsin

Debian/groff: unknown

The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack o

Action: Upgrade groff to 1.20.1-5 or later.

Affected

introducedfixedlast affected
01.20.1-5-

Fixed versions

1.20.1-5

Sources

published · modified · JSON