Debian/syncevolution: unknown
syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows l
Action: Upgrade syncevolution to 1.3.99.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.99.7-1 | - |
Fixed versions
| 1.3.99.7-1 |
Sources
- osv: DEBIAN-CVE-2014-1639#Debian:14/syncevolution
- https://security-tracker.debian.org/tracker/CVE-2014-1639
published · modified · JSON