CVE-2020-26932: Debian Linux

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended permissions are mode 4750 (for access by the sympa group)

Affected products

• Debian Debian Linux: version 10.0 only
• Sympa Sympa: before 6.2.40 (fixed in 6.2.40)

Published 2020-10-10. Last modified 2026-06-17.