tocsin

Debian/python-virtualenv: unknown

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.

Action: Upgrade python-virtualenv to 1.6-1 or later.

Affected

introducedfixedlast affected
01.6-1-

Fixed versions

1.6-1

Sources

published · modified · JSON