CVE-2019-11502
snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2019-11502 snapd Corrigé dans: 2.40-1
Références
- advisory openwall.com
- patch github.com
- patch openwall.com