Lucene search

K
osvGoogleOSV:DSA-583-1
HistoryNov 03, 2004 - 12:00 a.m.

lvm10 - insecure temporary directory

2004-11-0300:00:00
Google
osv.dev
2

0.0004 Low

EPSS

Percentile

5.1%

Trustix developers discovered insecure temporary file creation in a
supplemental script in the lvm10 package that didn’t check for
existing temporary directories, allowing local users to overwrite
files via a symlink attack.

For the stable distribution (woody) this problem has been fixed in
version 1.0.4-5woody2.

For the unstable distribution (sid) this problem has been fixed in
version 1.0.8-8.

We recommend that you upgrade your lvm10 package.