CVE-2015-4156

CVE-2015-4156 concerns GNU Parallel before 20150522 (Nepal). When using (1) --cat or (2) --fifo with --sshlogin, a local attacker can write to arbitrary files via a symlink attack on a temporary file. Root cause: a symlink attack on a temporary file used during these options. Impact stated: local...

CVE-2015-4155

Affected software: GNU Parallel. The vulnerability CVE-2015-4155 affects versions before 20150422 where using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress allows a local attacker to write arbitrary files via a symlink attack on a temporary file. Root cause: symlink manipulatio...