https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:18:34.855998+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-02023 bdu:2015-02023 2026-10-07T09:18:34.860156+00:00 bdu:2015-02023 https://cve.radiocsirt.org/vuln/euvd-2026-156535 EUVD-2026-156535 2026-10-07T09:18:34.860189+00:00 EUVD-2026-156535 https://cve.radiocsirt.org/vuln/fkie_cve-2001-1593 fkie_cve-2001-1593 2026-10-07T09:18:34.860203+00:00

The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.

 https://cve.radiocsirt.org/vuln/ghsa-q93q-4mxv-67mp GHSA-q93q-4mxv-67mp 2026-10-07T09:18:34.860231+00:00

The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.

 https://cve.radiocsirt.org/vuln/gsd-2001-1593 gsd-2001-1593 2026-10-07T09:18:34.860246+00:00 gsd-2001-1593 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12797-1 openSUSE-SU-2024:12797-1 — a2ps-4.15-1.1 on GA media 2026-10-07T09:18:34.860257+00:00

a2ps-4.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2001-1593 Withdrawn: UBUNTU-CVE-2001-1593 2026-10-07T09:18:34.860274+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: a2ps

Jakub Wilk found that a2ps, a tool to convert text and other types of files to PostScript, insecurely used a temporary file in spy_user(). A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running a2ps.