Debian/gummi: low 3.3
Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .toc
Action: Upgrade gummi to 0.6.5-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.5-6 | - |
Fixed versions
| 0.6.5-6 |
Sources
published · modified · JSON