Unspecified vulnerability in Perltidy

Perlpritic is a Perl source code analyzer; check-all-the-things is a code error checking software. perltidy is one of the set of software developer Steve Hancock developed by the Perl code organization tools. A security vulnerability exists in Perltidy 20160302 and earlier versions used in...

CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

CVE-2016-10374

CVE-2016-10374 affects perltidy (via its handling of the current working directory for certain output files and lack of symlink-attack protection). Local users can overwrite arbitrary files by creating a symlink (example: perltidy.ERR). Connected advisories show vendor-level fixes: Mageia MGASA-2...