| Package | Affected versions | Patched versions |
|---|---|---|
| advanced package tool | = 1.0.8≤ 1.0.9.1 | |
| apt | = 0.9.7.9= 1.0.9 |
The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free