COMMAND
savetextmode
SYSTEMS AFFECTED
Linux
PROBLEM
Mark A. Spencer posted following. The "savetextmode" command (a
script typically run by root) writes to /tmp/textregs and
/tmp/fontdata without any checks and will happily clobber stuff.
Moreover, the programs which actually do the writing
(restoretextmode and restorefont) are sometimes setuid root on
older linux systems... savetextmode comes with SVGATextMode 1.8.
SOLUTION
No official response from RedHat.