All errata/sisyphus/ALT-PU-2015-1397-1
ALT-PU-2015-1397-1

Package update parallel in branch sisyphus

Version20150422-alt1
Task#143475
Published2015-04-23
Max severityLOW
Severity:

Closed issues (2)

CVE-2015-4155
LOW3.6

GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Published: 2015-06-02Modified: 2025-04-12
CVSS 2.0LOW 3.6
CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:P/A:P
References
CVE-2015-4156
LOW3.6

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Published: 2015-06-02Modified: 2025-04-12
CVSS 2.0LOW 3.6
CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:P/A:P
References