CVE-2026-31979 himmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the task...

CVE-1999-0371

CVE-1999-0371 impacts Lynx: a local user can overwrite sensitive files via /tmp symlinks. The issue is a local-auth, race/symlink-related flaw in Lynx’s handling of /tmp, with a low base score (CVSSv2 1.2) and partial confidentiality impact. No exploit details are provided in the connected docume...