It was discovered that junit contained a local information disclosure
vulnerability. On Unix like systems, the system's temporary directory is
shared between all users on that system. Because of this, when files and
directories are written into this directory they are, by default, readable by
other users on that same system. This vulnerability does not allow other usersto overwrite the contents of these directories or files. This is purely an
information disclosure vulnerability (CVE-2020-15250).
- https://bugs.mageia.org/show_bug.cgi?id=27555
- https://lists.debian.org/debian-lts-announce/2020/11/msg00003.html
- https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp
- https://www.cve.org/CVERecord?id=CVE-2020-15250
- 7/core/junit-4.12-7.1.mga7
Get the latest Linux and open source security news straight to your inbox.