Description
checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openrc | 0.45.2-1 | — |
| Debian 13 | openrc | 0.45.2-1 | — |
| Debian 12 | openrc | 0.45.2-1 | — |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.13 | openrc | 0.42.1-r20 | — |
| Alpine v3.12 | openrc | 0.42.1-r12 | — |
| Alpine v3.11 | openrc | 0.42.1-r3 | — |
| Alpine v3.10 | openrc | 0.41.2-r2 | — |