Debian/tenshi: high 7.5
Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tensh
Action: Upgrade tenshi to 0.13-2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13-2.1 | - |
Fixed versions
| 0.13-2.1 |
Sources
published · modified · JSON