Debian/criu: high 7.8
The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory
Action: Upgrade criu to 1.8-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8-2 | - |
Fixed versions
| 1.8-2 |
Sources
published · modified · JSON