Race condition in pxz 4.999.99 Beta 3 uses weak file...
Low severity
Unreviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 23, 2015
Published to the GitHub Advisory Database
May 17, 2022
Last updated
Feb 3, 2023
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
References