PT-2015-7895 · Mageia · Mageia

Published 2015-04-23 · Updated 2015-04-23

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Mageia 4 versions (affected versions not specified, but only new installations are affected)

Description A security issue was identified where the /etc/shadow and /etc/gshadow files containing password hashes were created with incorrect permissions, making them world-readable. This issue only affected new installations of Mageia 4. The problem has been fixed by ensuring that these files are owned by the root user and shadow group, and are only readable by those two entities.

Recommendations For new Mageia 4 installations, update the setup package to the latest version to fix the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Related Identifiers

MGASA-2015-0162

Affected Products

Mageia

References · 6

• https://advisories.mageia.org/MGASA-2015-0162.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0162 · Vendor Advisory
• http://advisories.mageia.org/MGASA-2015-0116.html · Note
• https://ml.mageia.org/l/arc/qa-discuss/2015-03/msg00399.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=15644 · Note
• https://bugs.mageia.org/show_bug.cgi?id=14516 · Note