Debian Sosreport vulnerabilities

CVE-2015-7529 [HIGH] CVE-2015-7529: sosreport - sosreport in SoS 3.x allows local users to obtain sensitive information from sos... sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date. Scope: local bookworm: resolved (fixed in 3.2+git276-g7da50d6-3) bullseye: resolved (fixed in 3.2+git276-g

CVE-2015-3171 [MEDIUM] CVE-2015-3171: sosreport - sosreport 3.2 uses weak permissions for generated sosreport archives, which allo... sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive. Scope: local bookworm: resolved (fixed in 3.2-2) bullseye: resolved (fixed in 3.2-2)