CVE-2014-2277

The CVE-2014-2277 issue affects perltidy up to version 20120701-1, where the make_temporary_filename function can be exploited by local users to read sensitive data or replace arbitrary files via a symlink attack tied to the use of tmpnam. This is the explicit vulnerability detail in the provided...

CVE-2016-10374

CVE-2016-10374 affects perltidy (via its handling of the current working directory for certain output files and lack of symlink-attack protection). Local users can overwrite arbitrary files by creating a symlink (example: perltidy.ERR). Connected advisories show vendor-level fixes: Mageia MGASA-2...