| Package | Affected versions | Patched versions |
|---|---|---|
| logical volume management utilities | = 1.0.1= 1.0.4= 1.0.7= 1.0.8 |
The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free