Debian/rush: unknown

GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.

Action: Upgrade rush to 1.7+dfsg-4 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2013-6889
• https://security-tracker.debian.org/tracker/CVE-2013-6889

published 2014-05-08T14:29:12.440Z · modified 2026-09-01T20:03:19.608625006Z · JSON