Описание
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| kcron | fixed | 4:21.12.3-1 | package | |
| kcron | no-dsa | bullseye | package | |
| kcron | no-dsa | buster | package | |
| kcron | ignored | stretch | package |
Примечания
https://www.openwall.com/lists/oss-security/2022/02/25/3
https://invent.kde.org/system/kcron/-/commit/ef4266e3d5ea741c4d4f442a2cb12a317d7502a1
https://invent.kde.org/system/kcron/-/merge_requests/14 (followup fix)
https://kde.org/info/security/advisory-20220216-1.txt
Связанные уязвимости
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.
ALT-PU-2022-1586: package `kde5-kcron` update to version 21.12.3-alt1
ALT-PU-2022-1439: package `kde5-kcron` update to version 21.12.3-alt1