Debian Linux Security Advisory 2212-1 – Daniel Danner discovered that tmux, a terminal multiplexer, is not properly dropping group privileges. Due to a patch introduced by Debian, when invoked with the -S option, tmux is not dropping permissions obtained through its setgid installation.
Source: Debian Security Advisory 2212-1
