Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-1586

Высокий

ALT-PU-2022-1586: package kde5-kcron update to version 21.12.3-alt1

Источник
errata.altlinux.org
Дата публикации
27.03.2022
Дата обновления
27.03.2022
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kde5-kcron to version 21.12.3-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 4 лет назад

KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.

CVSS3: 7.8
nvd
больше 4 лет назад

KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.

CVSS3: 7.8
debian
больше 4 лет назад

KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, b ...

CVSS3: 7.8
github
больше 4 лет назад

KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.

CVSS3: 7.8
altlinux
больше 4 лет назад

ALT-PU-2022-1439: package `kde5-kcron` update to version 21.12.3-alt1