Lucene search

K
osvGoogleOSV:DSA-588-1
HistoryNov 08, 2004 - 12:00 a.m.

gzip - insecure temporary files

2004-11-0800:00:00
Google
osv.dev
12

EPSS

0

Percentile

5.1%

Trustix developers discovered insecure temporary file creation in
supplemental scripts in the gzip package which may allow local users
to overwrite files via a symlink attack.

For the stable distribution (woody) these problems have been fixed in
version 1.3.2-3woody3.

The unstable distribution (sid) is not affected by these problems.

We recommend that you upgrade your gzip package.