Scientific Linux Security Update : sos on SL7.x (noarch)
Medium Nessus Plugin ID 88801
SynopsisThe remote Scientific Linux host is missing a security update.
DescriptionAn insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the system. (CVE-2015-7529)
This update also fixes the following bug :
- Previously, the sosreport tool was not collecting the /var/lib/ceph and /var/run/ceph directories when run with the ceph plug-in enabled, causing the generated sosreport archive to miss vital troubleshooting information about ceph. With this update, the ceph plug-in for sosreport collects these directories, and the generated report contains more useful information.
SolutionUpdate the affected sos package.