Описание
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| freedombox | fixed | 25.17.1 | package | |
| freedombox | fixed | 25.9.3+deb13u1 | trixie | package |
| freedombox | no-dsa | bookworm | package | |
| freedombox | postponed | bullseye | package |
Примечания
Fixed by: https://salsa.debian.org/freedombox-team/freedombox/-/commit/8ba444990b4af6eec4b6b2b26482b107d7ff1229 (v25.17.1)
https://salsa.debian.org/freedombox-team/freedombox/-/issues/2554 (not public)
EPSS
Связанные уязвимости
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.
EPSS