ALT Linux Team

Package parallel update in sisyphus on 2015-04-23

ALT-PU-2015-1397-1

Package parallel updated to version 20150422-alt1 for branch sisyphus in task 143475.

Closed vulnerabilities

Published: 2015-06-02
Modified: 2024-11-21

CVE-2015-4155

GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Severity: LOW (3.6)
References:
Published: 2015-06-02
Modified: 2024-11-21

CVE-2015-4156

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Severity: LOW (3.6)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top