Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | rust-pleaser | < 0.4.1-1 | rust-pleaser_0.4.1-1_all.deb |
Debian | 11 | all | rust-pleaser | < 0.4.1-1 | rust-pleaser_0.4.1-1_all.deb |
Debian | 999 | all | rust-pleaser | < 0.4.1-1 | rust-pleaser_0.4.1-1_all.deb |
Debian | 13 | all | rust-pleaser | < 0.4.1-1 | rust-pleaser_0.4.1-1_all.deb |