GHSA-2W8R-9XJ7-69J5 mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the...

PT-2025-19374

Name of the Vulnerable Software and Affected Versions Ubuntu edk2 UEFI firmware packages versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 Ubuntu edk2 UEFI firmware packages affected versions not specified Description The Ubuntu edk2 UEFI firmware packages unintentionally permitted access to the...