CVE-2017-18188

Name of the Vulnerable Software and Affected Versions: OpenRC opentmpfiles versions 0.1.3 and earlier

Description: The issue allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run, when the fs.protected hardlinks sysctl is turned off.

Recommendations: For OpenRC opentmpfiles versions 0.1.3 and earlier, as a temporary workaround, consider restricting the use of the "chown -R" command on directories that may contain hard links until a patch is available.