setup: information disclosure
| Package(s): | setup | CVE #(s): | |||||||||||||||||
| Created: | March 30, 2015 | Updated: | April 27, 2015 | ||||||||||||||||
| Description: | From the Mageia advisory:
An issue has been identified in Mageia 4's setup package where the /etc/shadow and /etc/gshadow files containing password hashes were created with incorrect permissions, making them world-readable (mga#14516). This update fixes this issue by enforcing that those files are owned by the root user and shadow group, and are only readable by those two entities. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||