{"action":"Upgrade powerpc-utils to 1.3.1-2 or later.","affected":[{"fixed":"1.3.1-2","introduced":"0"}],"component":"powerpc-utils","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.3.1-2"],"id":"tcs_01M5NATJ43NVH7BPC3FF7F75RW","modified_at":"2026-10-23T15:47:39.989261754Z","published_at":"2014-06-17T15:55:06.317Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-4040","https://security-tracker.debian.org/tracker/CVE-2014-4040"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-4040","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-4040"}],"summary":"snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwo"}