[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RLSA-2024:0647 --- rpm

ID: oval:org.secpod.oval:def:4501528Date: (C)2024-02-15   (M)2024-02-15
Class: PATCHFamily: unix




The RPM Package Manager is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Security Fix: * rpm: TOCTOU race in checks for unsafe symlinks * rpm: races with chown/chmod/capabilities calls during installation * rpm: checks for unsafe symlinks are not performed for intermediary directories For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
Rocky Linux 8
Product:
rpm
Reference:
RLSA-2024:0647
CVE-2021-35937
CVE-2021-35938
CVE-2021-35939
CVE    3
CVE-2021-35939
CVE-2021-35938
CVE-2021-35937

© SecPod Technologies