Vasily Kulikov

**Name of the Vulnerable Software and Affected Versions** Tesseract versions 2.03 through 2.04 **Description** The issue allows an attacker to rewrite an arbitrary user file by guessing the PID and creating a link to the user's file. **Recommendations** For Tesseract versions 2.03 and 2.04, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Conky versions prior to 1.8.1 **Description** The issue concerns a potential security risk in the Conky package, which could lead to the compromise of data integrity and availability. This can be exploited locally. Specifically, the `getSkillname` function in the eve module of Conky allows local users to overwrite arbitrary files via a symlink attack on `/tmp/.cesf`. **Recommendations** For Conky versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `/tmp/.cesf` file to minimize the risk of exploitation.