tocsin

Debian/sosreport: high 7.8

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sos

Action: Upgrade sosreport to 3.2+git276-g7da50d6-3 or later.

Affected

introducedfixedlast affected
03.2+git276-g7da50d6-3-

Fixed versions

3.2+git276-g7da50d6-3

Sources

published · modified · JSON