run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Advisories 3

• DSA-292-3 mime-support - insecure temporary file creation Debian Security (DSA / DLA) · Mar 9, 2026
• DSA-292-2 mime-support - insecure temporary file creation Debian Security (DSA / DLA) · Mar 9, 2026
• DSA-292-1 mime-support - insecure temporary file creation Debian Security (DSA / DLA) · Mar 9, 2026

References

• DSA-292 vendor-advisory