Description
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | logcheck | 1.1.1-13.2 | — |
| Debian 13 | logcheck | 1.1.1-13.2 | — |
| Debian 12 | logcheck | 1.1.1-13.2 | — |
| Debian 3.0 | logcheck | 1.1.1-13.1woody1 | DSA-488 |
Advisories 1
- DSA-488 logcheck - insecure temporary directory Debian Security (DSA / DLA) · Mar 9, 2026
References
- MDKSA-2004:155 vendor-advisory
- 11399 third-party-advisory
- logcheck-directory-symlink(15888) vdb-entry
- DSA-488 vendor-advisory
- 10162 vdb-entry