| Package | Affected versions | Patched versions |
|---|---|---|
| bzip2 | = 0.9= 0.9.5_a= 0.9.5_b= 0.9.5_c= 0.9.5_d= 0.9_a= 0.9_b= 0.9_c= 1.0= 1.0.1= 1.0.2 |
Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free