Debian/sosreport: medium 5.5
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
Action: Upgrade sosreport to 3.2-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2-2 | - |
Fixed versions
| 3.2-2 |
Sources
published · modified · JSON