Description
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-968-1 noweb - insecure temporary file Debian Security (DSA / DLA) · Mar 9, 2026
References
- GLSA-200602-14 vendor-advisory
- 18812 third-party-advisory
- USN-254-1 vendor-advisory
- ADV-2006-0547 vdb-entry
- 18809 third-party-advisory
- 18967 third-party-advisory
- 19027 third-party-advisory
- DSA-968 vendor-advisory
- 16610 vdb-entry