ALT-PU-2015-2008-2
Package util-linux updated to version 2.27.1-alt1 for branch sisyphus in task 153318.
Closed vulnerabilities
Published: 2017-08-23
Modified: 2025-12-04
Modified: 2025-12-04
CVE-2015-5224
The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.
Severity: HIGH (7.5)Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Severity: CRITICAL (9.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- http://www.openwall.com/lists/oss-security/2015/08/24/3
- http://www.securityfocus.com/bid/76467
- https://bugzilla.redhat.com/show_bug.cgi?id=1256686
- https://github.com/karelzak/util-linux/commit/bde91c85bdc77975155058276f99d2e0f5eab5a9
- http://www.openwall.com/lists/oss-security/2015/08/24/3
- http://www.securityfocus.com/bid/76467
- https://bugzilla.redhat.com/show_bug.cgi?id=1256686
- https://github.com/karelzak/util-linux/commit/bde91c85bdc77975155058276f99d2e0f5eab5a9
Published: 2023-08-22
Modified: 2024-12-20
Modified: 2024-12-20
CVE-2020-21583
An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date.
Severity: MEDIUM (6.7)Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786804
- https://packetstormsecurity.com/files/132061/hwclock-Privilege-Escalation.html
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786804
- https://packetstormsecurity.com/files/132061/hwclock-Privilege-Escalation.html
- https://security.netapp.com/advisory/ntap-20241220-0006/
Closed bugs
Remove explicit nfs-utils requirement