| Package | Affected versions | Patched versions |
|---|---|---|
| groff | = 1.10= 1.11= 1.11a= 1.14= 1.15= 1.16= 1.16.1= 1.17.1= 1.17.2= 1.18.1= 1.19= 1.19.1= 1.19.2= 1.20= 1.20.1≤ 1.21 |
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free