tocsin

Debian/apt: unknown

The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file.

Action: Upgrade apt to 1.0.9.2 or later.

Affected

introducedfixedlast affected
01.0.9.2-

Fixed versions

1.0.9.2

Sources

published · modified · JSON