CVE-2017-15357

The CVE-2017-15357 entry concerns Haystack Software Arq for Mac (auto-updater). The vulnerability is in the updater’s setpermissions function, which can race via a symlink to grant root privileges by manipulating the updater binary itself. Affected releases are Arq for Mac before 5.9.7. Impact is...