tocsin

Debian/pastescript: unknown

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveragi

Action: Upgrade pastescript to 1.7.5-2 or later.

Affected

introducedfixedlast affected
01.7.5-2-

Fixed versions

1.7.5-2

Sources

published · modified · JSON