CVE-2020-10737

CVE-2020-10737 is a race-condition vulnerability in the mkhomedir tool from the oddjob package (pre-0.34.5 and pre-0.34.6). During home creation, mkhomedir copies /etc/skel into the new home and changes ownership to the new user without proper homedir-path validation. An attacker can abuse a syml...