huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2010-2803: kernel: drm ioctls infoleak
Component: kernel
Severity: Moderate
Public date: 2010-08-17T00:00:00+00:00

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4, 5 and Red Hat Enterprise MRG as they did not include
support for GPU DRM.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: b9f0aee83335db1f3915f4e42a5e21b351740afd
CVE-2010-2805: freetype: FT_Stream_EnterFrame() does not properly validate certain position values
Component: freetype
Severity: Important
Public date: 2010-08-04T00:00:00+00:00

The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

Statement: Not vulnerable. This issue did not affect the versions of freetype as
shipped with Red Hat Enterprise Linux 3, 4, or 5.

Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 45a3c76b547511fa9d97aca34b150a0663257375
CVE-2010-2806: FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656)
Component: FreeType
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2010-08-05T00:00:00+00:00

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: c06da1ad34663da7b6fc39b030dc3ae185b96557
CVE-2010-2808: FreeType: Stack-based buffer overflow by processing certain LWFN fonts
Component: FreeType
Severity: Important
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2010-08-05T00:00:00+00:00

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 81f3472c0ba7b8f6466e2e214fa8c1c17fade975
CVE-2010-2942: kernel: net sched: fix some kernel memory leaks
Component: kernel
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2010-08-17T00:00:00+00:00

The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3 as it did not include upstream commit be84c7f6 (history repository) that introduced the problem. A future kernel update in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/davem/net-2.6.git
Upstream fix commit: 1c40be12f7d8ca1d387510d39787b12e512a7ce8
CVE-2010-2943: kernel: xfs: validate inode numbers in file handles correctly
Component: kernel
Severity: Moderate
Public date: 2010-06-20T00:00:00+00:00

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG as they did not include support for the XFS file system. A future kernel update in Red Hat Enterprise
Linux 5 will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.35
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7124fe0a5b619d65b739477b3b55a20bf805b06d
CVE-2010-2948: (bgpd): Stack buffer overflow by processing certain Route-Refresh messages
Component: (bgpd)
Severity: Moderate
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2010-08-19T00:00:00+00:00

Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.

Statement: This issue is not planned to be fixed in Red Hat Enterprise Linux 3
due to this product being in Production 3 of its maintenance
life-cycle, where only qualified security errata of important and
critical impact are addressed.

For further information about the Errata Support Policy, visit:
http://www.redhat.com/security/updates/errata

A future update in Red Hat Enterprise Linux 4 and
Red Hat Enterprise Linux 5 may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: quagga_0_99_17_release
Upstream repository: https://code.quagga.net/quagga.git
Upstream fix commit: d64379e8f3c0636df53ed08d5b2f1946cfedd0e3
CVE-2010-2949: (bgpd): DoS (crash) while processing certain BGP update AS path messages
Component: (bgpd)
Severity: Low
Public date: 2010-08-19T00:00:00+00:00

bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message.

Statement: Not vulnerable. This issue did not affect the versions of quagga
package as shipped with Red Hat Enterprise Linux 3, 4, or 5, as
these versions do not support 4 byte AS numbers (AS4 support) yet.

Affected upstream versions: n/a
Fixed upstream versions: quagga_0_99_17_release
Upstream repository: https://code.quagga.net/quagga.git
Upstream fix commit: cddb8112b80fa9867156c637d63e6e79eeac67bb
CVE-2010-2955: kernel: wireless: fix 64K kernel heap content leak via ioctl
Component: kernel
Severity: Moderate
Public date: 2010-08-27T00:00:00+00:00

The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5 as they did not backport the upstream commit 3d23e349 that had introduced the problem. A future update in Red Hat Enterprise MRG may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/linville/wireless-2.6.git
Upstream fix commit: 42da2f948d949efd0111309f5827bf0298bcc9a4
CVE-2010-2962: kernel: arbitrary kernel memory write via i915 GEM ioctl
Component: kernel
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2010-10-03T00:00:00+00:00

drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.36 does not properly validate pointers to blocks of memory, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via crafted use of the ioctl interface, related to (1) pwrite and (2) pread operations.

Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not include support for Graphics Execution Manager (GEM) in the i915 driver, and therefore are not affected by this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ce9d419dbecc292cc3e06e8b1d6d123d3fa813a4
CVE-2010-3015: kernel: integer overflow in ext4_ext_get_blocks()
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2010-03-04T00:00:00+00:00

Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service (BUG and system crash) via a write operation on the last block of a large file, followed by a sync operation.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include
support for the Ext4 filesystem. A future kernel update in Red Hat Enterprise
Linux 5 will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 731eb1a03a8445cde2cb23ecfb3580c6fa7bb690
CVE-2010-3066: kernel: io_submit_one() NULL ptr deref
Component: kernel
Severity: Moderate
Public date: 2007-08-08T00:00:00+00:00

The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FLAG_RESFD flag.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3 and 4 as they did not include support for eventfd in the
Async I/O (AIO) implementation. It did not affect the version of Linux kernel
as shipped with Red Hat Enterprise MRG as it has already had the fix to this
issue.  This issue was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0839.html

Affected upstream versions: n/a
Fixed upstream versions: v2.6.23
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 87e2831c3fa39cbf6f7ab676bb5aef039b9659e2
CVE-2010-3067: kernel: do_io_submit() infoleak
Component: kernel
Severity: Low
Public date: 2010-09-15T00:00:00+00:00

Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 75e1c70fc31490ef8a373ea2a4bea2524099b478
CVE-2010-3078: kernel: xfs: XFS_IOC_FSGETXATTR ioctl memory leak
Component: kernel
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2010-09-07T00:00:00+00:00

The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4, and Red Hat Enterprise MRG as they did not include
support for the XFS file system.  This issue was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0839.html

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9
CVE-2010-3079: kernel: ftrace NULL ptr deref
Component: kernel
Severity: Moderate
Public date: 2010-09-09T00:00:00+00:00

kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4 and 5, as they do not include support for Ftrace. It did not affect Red Hat Enterprise MRG as it did not contain the upstream commit 8fc0c701 that introduced this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 9c55cb12c1c172e2d51e85fbb5a4796ca86b77e7
CVE-2010-3080: kernel: /dev/sequencer open failure is not handled correctly
Component: kernel
Severity: Moderate
Public date: 2010-09-08T00:00:00+00:00

Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5 as it did not include upstream commit 7034632d that introduced the problem. It did not affect Red Hat Enterprise MRG as the /dev/sequencer device file is restricted to root access only.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 27f7ad53829f79e799a253285318bff79ece15bd
CVE-2010-3081: kernel: 64-bit Compatibility Mode Stack Pointer Underflow
Component: kernel
Severity: Important
CWE: CWE-191 (Integer Underflow (Wrap or Wraparound))
Public date: 2010-09-15T00:00:00+00:00

The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.

Statement: More information can be found in this kbase: https://access.redhat.com/kb/docs/DOC-40265.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c41d68a513c71e35a14f66d71782d27a79a81ea6
CVE-2010-3084: kernel: niu: buffer overflow for ETHTOOL_GRXCLSRLALL
Component: kernel
Severity: Important
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
Public date: 2010-09-07T00:00:00+00:00

Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOL_GRXCLSRLALL ethtool command.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3 and 4, as they do not include support for the Neptune Ethernet driver. It did not affect Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG, as they do not contain the upstream commit 2d96cf8c that introduced this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ee9c5cfad29c8a13199962614b9b16f1c4137ac9
CVE-2010-3086: kernel panic via futex
Component: kernel panic via futex
Severity: Moderate
Public date: 2010-11-09T00:00:00+00:00

include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service (panic) via an invalid application that triggers a page fault.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3 and 4 as they did not support for the FUTEX_LOCK_PI futex operation. It did not affect the version of Linux kernel as shipped with Red Hat Enterprise MRG as it has already had the fix to this issue. This issue was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0839.html

Affected upstream versions: n/a
Fixed upstream versions: v2.6.25
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 9d55b9923a1b7ea8193b8875c57ec940dc2ff027
CVE-2010-3296: kernel: drivers/net/cxgb3/cxgb3_main.c reading uninitialized stack memory
Component: kernel
Severity: Low
Public date: 2010-09-11T00:00:00+00:00

The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/davem/net-2.6.git
Upstream fix commit: 49c37c0334a9b85d30ab3d6b5d1acb05ef2ef6de
CVE-2010-3297: kernel: drivers/net/eql.c: reading uninitialized stack memory
Component: kernel
Severity: Low
Public date: 2010-09-11T00:00:00+00:00

The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5 as they did not include support for equalizer load-balancer for serial network interfaces. This was addressed in Red Hat Enterprise Linux Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0771.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/davem/net-2.6.git
Upstream fix commit: 44467187dc22fdd33a1a06ea0ba86ce20be3fe3c
CVE-2010-3298: kernel: drivers/net/usb/hso.c: prevent reading uninitialized memory
Component: kernel
Severity: Low
Public date: 2010-09-11T00:00:00+00:00

The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5, as they did not support USB Option High Speed Mobile Devices. This was addressed in Red Hat Enterprise Linux Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0771.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/davem/net-2.6.git
Upstream fix commit: 7011e660938fc44ed86319c18a5954e95a82ab3e
CVE-2010-3301: kernel: IA32 System Call Entry Point Vulnerability
Component: kernel
Severity: Important
CWE: CWE-648 (Incorrect Use of Privileged APIs)
Public date: 2010-09-15T00:00:00+00:00

The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register.  NOTE: this vulnerability exists because of a CVE-2007-4573 regression.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG, as they do not contain the upstream commit d4d67150 that introduced this flaw.

More information can be found in this kbase: https://access.redhat.com/kb/docs/DOC-40330

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: eefdca043e8391dcd719711716492063030b55ac
CVE-2010-3316: pam: pam_xauth missing return value checks from setuid() and similar calls
Component: pam
Severity: Moderate
Public date: 2010-07-20T00:00:00+00:00

The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check.


Affected upstream versions: n/a
Upstream repository: https://git.altlinux.org/people/ldv/packages/pam.git
Upstream fix commit: 06f882f30092a39a1db867c9744b2ca8d60e4ad6
CVE-2010-3432: kernel: sctp: do not reset the packet during sctp_packet_config
Component: kernel
Severity: Important
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
Public date: 2010-09-15T00:00:00+00:00

The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3 as it did not include support for SCTP. This was addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0958.html and https://rhn.redhat.com/errata/RHSA-2010-0842.html. Future updates in Red Hat Enterprise Linux 4 and 5 may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4bdab43323b459900578b200a4b8cf9713ac8fab
CVE-2010-3435: pam: pam_env and pam_mail accessing users' file with root privileges
Component: pam
Severity: Moderate
Public date: 2010-09-21T00:00:00+00:00

The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.


Affected upstream versions: n/a
Upstream repository: https://git.altlinux.org/people/ldv/packages/pam.git
Upstream fix commit: 06f882f30092a39a1db867c9744b2ca8d60e4ad6