EPSS
Percentile
38.0%
sympa does not securely configure file permissions. debian/sympa.postinst uses mode 4755 for sympa_newaliases-wrapper while the intended permissions are mode 4750 (for access by the sympa group).
debian/sympa.postinst
4755
sympa_newaliases-wrapper
4750
bugs.debian.org/971904
salsa.debian.org/sympa-team/sympa/-/merge_requests/1
security-tracker.debian.org/tracker/CVE-2020-26932
www.debian.org/security/2020/dsa-4818