tocsin

Debian/man-db: high 7.8

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

Action: Upgrade man-db to 2.7.6-1 or later.

Affected

introducedfixedlast affected
02.7.6-1-

Fixed versions

2.7.6-1

Sources

published · modified · JSON