Red Hat Security Advisory

RHSA-2016:0152

sos security and bug fix update

Released 2016-02-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) sos-3.2-28.el6_7.2
Red Hat Enterprise Linux HPC Node (v. 6) sos-3.2-28.el6_7.2
Red Hat Enterprise Linux Server (v. 6) sos-3.2-28.el6_7.2
Red Hat Enterprise Linux Workstation (v. 6) sos-3.2-28.el6_7.2

Fixes 1 record

TI-2015-06262 CVE-2015-7529 · GHSA-3g56-2hh3-35ph

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport…

LOW 34

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$da…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00438 Published 2017-11-06 Partial fix · 3.3 CWE-59