This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2015-7529 →

DEBIAN-CVE-2015-7529

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive fil...

Original description

The description as published by the source.

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 sosreport

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2+git276-g7da50d6-3"}]}]

References

advisory security-tracker.debian.org