tocsin

Debian/util-linux: high 7.8

runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

Action: Upgrade util-linux to 2.31.1-0.1 or later.

Affected

introducedfixedlast affected
02.31.1-0.1-

Fixed versions

2.31.1-0.1

Sources

published · modified · JSON