Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

Related bugs and status

CVE-2021-31155 (Candidate) is related to these bugs:

Bug #1928381: Fixes for CVE-2021-31153, CVE-2021-31154 and CVE-2021-31155

		In	Importance	Status
1928381	Fixes for CVE-2021-31153, CVE-2021-31154 and CVE-2021-31155	rust-pleaser (Ubuntu)	Undecided	Fix Released
1928381	Fixes for CVE-2021-31153, CVE-2021-31154 and CVE-2021-31155	rust-pleaser (Ubuntu Impish)	Undecided	Fix Released
1928381	Fixes for CVE-2021-31153, CVE-2021-31154 and CVE-2021-31155	rust-pleaser (Ubuntu Hirsute)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://gitlab.com/edn...
MISC: https://www.openwall.c...