util-linux (chfn/chsh): Partial disclosure of arbitrary files via libreadline in setuid chfn/chsh

CVE-2022-0563Kernel, userspace & hypervisorcurated

Impact

Partial disclosure of arbitrary files via libreadline in setuid chfn/chsh

Who can reach it

Local user

What to do

Package update; no reboot

References

https://access.redhat.com/security/cve/CVE-2022-0563

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.