tocsin

Debian/cockpit: low 3.2

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

Action: Upgrade cockpit to 287.1-0+deb12u3 or later.

Affected

introducedfixedlast affected
0287.1-0+deb12u3-

Fixed versions

287.1-0+deb12u3

Sources

published · modified · JSON