| Package | Affected versions | Patched versions |
|---|---|---|
| gzip | = 1.2.4= 1.2.4a= 1.3.3 |
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free