Karel Zak

**Name of the Vulnerable Software and Affected Versions** util-linux versions prior to 2.37.4 **Description** A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an `INPUTRC` environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. **Recommendations** For util-linux versions prior to 2.37.4, update to version 2.37.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the `chfn` and `chsh` utilities until a patch is available. Avoid using the `INPUTRC` environment variable in the affected utilities until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** util-linux (affected versions not specified) **Description** The issue is related to the mkostemp function in login-utils, which can be exploited by remote attackers to cause file name collision and potentially other attacks when used incorrectly. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.