All errata/sisyphus/ALT-PU-2015-2008-2
ALT-PU-2015-2008-2

Package update util-linux in branch sisyphus

Version2.27.1-alt1
Task#153318
Published2026-02-04
Max severityCRITICAL
Severity:

Closed issues (2)

CVE-2015-5224
CRITICAL9.8

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Published: 2017-08-23Modified: 2025-12-04
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
CVE-2020-21583
MEDIUM6.7

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date.

Published: 2023-08-22Modified: 2024-12-20
CVSS 3.xMEDIUM 6.7
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References

Closed bugs (1)