Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian LTS DLA-3874-1 Critical: NSIS Directory Access Control Fix

debian lts
Calendar Grey September 4, 2024
Dist Debian Esm H88
Debian LTS Advisory DLA-3875-1 tackles a vulnerability in libxml2. Ensure you update to version 2.9.10+dfsg-5+deb11u1 to enhance security.
CVE-2023-37378 Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory
Topics%20covered

Topics Covered

security advisory software update access control Debian directory flaw nsis install system

Summary

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles
access control for an uninstaller directory.

For Debian 11 bullseye, this problem has been fixed in version
3.06.1-1+deb11u1.

We recommend that you upgrade your nsis packages.

For the detailed security status of nsis please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/nsis

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: nsis
Version: 3.06.1-1+deb11u1
CVE ID: CVE-2023-37378
Debian Bug: 1040880

Topics%20covered

Topics Covered

security advisory software update access control Debian directory flaw nsis install system

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here