Search for packages
| purl | pkg:deb/debian/acl@2.2.47-2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-m75x-8caa-aaah
Aliases: CVE-2009-4411 |
The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links even when the --physical (aka -P) or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T16:59:33.897381+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-20T22:44:48.254970+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | None | 36.1.3 |
| 2025-06-08T13:13:09.638601+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T09:44:39.191627+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T16:08:44.051696+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | None | 36.1.0 |
| 2025-04-12T19:00:59.197544+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T08:17:00.659470+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T14:40:00.723774+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | None | 36.0.0 |
| 2024-11-27T11:37:23.059256+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-10-13T06:33:49.021430+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-09-20T20:59:28.460771+00:00 | Debian Oval Importer | Affected by | VCID-m75x-8caa-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |