CVE-2015-7529: sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privil...

Security readout for executives and security teams

CVE-2015-7529 affects sosreport in SoS 3.x, a Linux support-data collection tool. A local user may access sensitive report data or potentially gain higher privileges through unsafe archive handling in a temporary directory. The issue matters most on shared systems or servers where non-admin users have local access. Exposure is most likely on Linux systems running SoS 3.x or sosreport packages from affected distributions, especially multi-user hosts. The bundle names Ubuntu and Red Hat advisories, but does not provide exact affected package versions. Prioritize remediation on shared administrative servers, production Linux hosts, and environments with local user access. This is not evidenced as internet-exploitable or actively exploited in the bundle, but privilege gain and support-report data exposure justify timely patching. Mitigation focus: Apply vendor sosreport or sos package updates from Ubuntu and Red Hat advisories.; Check vendor guidance for exact fixed versions and supported platforms.; Limit sosreport execution to trusted administrators only..

Prepared

Jun 12, 2026, 20:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.