CVE-2015-3171
Fixed in a distro release EPSS <1%
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
Products: sos_project sos
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | sosreport | 3.3 |
| PyPI | sosreport | d7759d3ddae5fe99a340c88a1d370d65cfa73fd6 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sosreport | 3.2-2 |