Secunia

Debian has issued updated packages for noweb. These fix a vulnerability, which can be exploited by a malicious, local user to escalate privileges on a vulnerable system.

The problem is that the "noroff" script creates temporary files insecurely. This can be exploited via a symlink attack and may allow a malicious user to overwrite arbitrary files on the system with the privileges of the user invoking the script.

Solution
Updated packages:
Further details available in Customer Area

Provided and/or discovered by
Jakob Lell

Deep Links
Links available in Customer Area