Download
| Alert*
|
oval:org.secpod.oval:def:2000222
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition. oval:org.secpod.oval:def:113960 These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages. |
