Segooon

**Name of the Vulnerable Software and Affected Versions** Conky versions prior to 1.8.1 **Description** The issue concerns a potential security risk in the Conky package, which could lead to the compromise of data integrity and availability. This can be exploited locally. Specifically, the `getSkillname` function in the eve module of Conky allows local users to overwrite arbitrary files via a symlink attack on `/tmp/.cesf`. **Recommendations** For Conky versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `/tmp/.cesf` file to minimize the risk of exploitation.