Red Hat Security AdvisoryRHSA-2014:1974
rpm security update
Released 2014-12-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) popt-1.10.2.3-36.el5_11, popt-1.10.2.3-36.el5_11.i386, popt-1.10.2.3-36.el5_11.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) popt-1.10.2.3-36.el5_11, popt-1.10.2.3-36.el5_11.i386, rpm-4.4.2.3-36.el5_11 +5
- Red Hat Enterprise Linux Desktop (v. 6) rpm-4.8.0-38.el6_6, rpm-build-4.8.0-38.el6_6, rpm-libs-4.8.0-38.el6_6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) rpm-apidocs-4.8.0-38.el6_6, rpm-cron-4.8.0-38.el6_6, rpm-devel-4.8.0-38.el6_6
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) rpm-4.4.2.3-36.el5_11, rpm-apidocs-4.4.2.3-36.el5_11, rpm-apidocs-4.4.2.3-36.el5_11.i386 +4
- Red Hat Enterprise Linux HPC Node (v. 6) rpm-4.8.0-38.el6_6, rpm-libs-4.8.0-38.el6_6, rpm-python-4.8.0-38.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) rpm-apidocs-4.8.0-38.el6_6, rpm-build-4.8.0-38.el6_6, rpm-cron-4.8.0-38.el6_6 +1
- Red Hat Enterprise Linux Server (v. 6) rpm-4.8.0-38.el6_6, rpm-build-4.8.0-38.el6_6, rpm-devel-4.8.0-38.el6_6 +4
- Red Hat Enterprise Linux Server Optional (v. 6) rpm-apidocs-4.8.0-38.el6_6, rpm-cron-4.8.0-38.el6_6
- Red Hat Enterprise Linux Workstation (v. 6) rpm-4.8.0-38.el6_6, rpm-build-4.8.0-38.el6_6, rpm-devel-4.8.0-38.el6_6 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) rpm-apidocs-4.8.0-38.el6_6, rpm-cron-4.8.0-38.el6_6
Fixes 1 record
Priority MEDIUM 44
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrat…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.07606 · Published 2014-12-16 · Fixed CWE-74
