Description
sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | setroubleshoot +1 | 2.0.5-3.el5 | RHSA-2008:0061 |
| RHEL 5 | setroubleshoot-plugins | 2.0.4-2.el5 | RHSA-2008:0061 |
Advisories 1
- RHSA-2008:0061 Red Hat Security Advisory: setroubleshoot security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- setroubleshoot-sealert-symlink(42591) vdb-entry
- oval:org.mitre.oval:def:9705 vdb-entry signature
- 30339 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=288221
- 1020077 vdb-entry
- RHSA-2008:0061 vendor-advisory
- 29320 vdb-entry