Red Hat Security AdvisoryRHSA-2013:1537
augeas security, bug fix, and enhancement update
Released 2013-11-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) augeas-1.0.0-5.el6, augeas-libs-1.0.0-5.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) augeas-1.0.0-5.el6, augeas-devel-1.0.0-5.el6
- Red Hat Enterprise Linux HPC Node (v. 6) augeas-1.0.0-5.el6, augeas-libs-1.0.0-5.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) augeas-1.0.0-5.el6, augeas-devel-1.0.0-5.el6
- Red Hat Enterprise Linux Server (v. 6) augeas-1.0.0-5.el6, augeas-libs-1.0.0-5.el6, augeas-libs-1.0.0-5.el6.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) augeas-1.0.0-5.el6, augeas-devel-1.0.0-5.el6, augeas-devel-1.0.0-5.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) augeas-1.0.0-5.el6, augeas-libs-1.0.0-5.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) augeas-1.0.0-5.el6, augeas-devel-1.0.0-5.el6
- Red Hat Storage Server 3 augeas-1.0.0-5.el6
- virt agents (not vdsm) for server augeas-1.0.0-5.el6
Fixes 2 records
Priority LOW 18
The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive i…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00417 · Published 2013-11-23 · Partial fix
Priority LOW 16
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00446 · Published 2013-11-23 · Partial fix CWE-59
