ALT-PU-2022-1068: package mc update to version 4.8.27-alt1
Описание
This update upgrades mc to version 4.8.27-alt1.
Устраненные уязвимости26
Связанные уязвимости
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.