Debian/tardiff: low 3.3
Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory.
Action: Upgrade tardiff to 0.1-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1-3 | - |
Fixed versions
| 0.1-3 |
Sources
- osv: DEBIAN-CVE-2015-0858#Debian:14/tardiff
- https://security-tracker.debian.org/tracker/CVE-2015-0858
published · modified · JSON