CVE-2009-5082
Fixed in a distro release EPSS <1%
The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.
Products: gnu groff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | groff | 1.20.1-5 |
| Debian 13 | groff | 1.20.1-5 |
| Debian 14 | groff | 1.20.1-5 |