Patchwire CVEs, their patch status, and feeds to follow them

CVE-2009-5082

Fixed in a distro release EPSS <1%

The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.

Published 2011-06-30 · CVE record · OSV

Products: gnu groff

Distro releases

ReleasePackageFixed in
Debian 12groff1.20.1-5
Debian 13groff1.20.1-5
Debian 14groff1.20.1-5