Red Hat Security AdvisoryRHSA-2014:1975
rpm security update
Released 2014-12-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) rpm-4.8.0-33.el6_4, rpm-apidocs-4.8.0-33.el6_4, rpm-build-4.8.0-33.el6_4 +2
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5) rpm-4.8.0-38.el6_5, rpm-apidocs-4.8.0-38.el6_5, rpm-build-4.8.0-38.el6_5 +2
- Red Hat Enterprise Linux EUS (v. 5.9 server) popt-1.10.2.3-34.el5_9, popt-1.10.2.3-34.el5_9.i386, popt-1.10.2.3-34.el5_9.ia64 +25
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) rpm-4.8.0-33.el6_4, rpm-libs-4.8.0-33.el6_4, rpm-python-4.8.0-33.el6_4
- Red Hat Enterprise Linux HPC Node EUS (v. 6.5) rpm-4.8.0-38.el6_5, rpm-libs-4.8.0-38.el6_5, rpm-python-4.8.0-38.el6_5
- Red Hat Enterprise Linux Long Life (v. 5.6 server) popt-1.10.2.3-24.el5_6, popt-1.10.2.3-24.el5_6.i386, popt-1.10.2.3-24.el5_6.ia64 +18
- Red Hat Enterprise Linux Server AUS (v. 6.2) rpm-4.8.0-20.el6_2.1, rpm-build-4.8.0-20.el6_2.1, rpm-devel-4.8.0-20.el6_2.1 +2
- Red Hat Enterprise Linux Server EUS (v. 6.4) rpm-4.8.0-33.el6_4, rpm-build-4.8.0-33.el6_4, rpm-devel-4.8.0-33.el6_4 +4
- Red Hat Enterprise Linux Server EUS (v. 6.5) rpm-4.8.0-38.el6_5, rpm-build-4.8.0-38.el6_5, rpm-devel-4.8.0-38.el6_5 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) rpm-4.8.0-20.el6_2.1, rpm-apidocs-4.8.0-20.el6_2.1, rpm-cron-4.8.0-20.el6_2.1
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) rpm-4.8.0-33.el6_4, rpm-apidocs-4.8.0-33.el6_4, rpm-cron-4.8.0-33.el6_4
- Red Hat Enterprise Linux Server Optional EUS (v. 6.5) rpm-4.8.0-38.el6_5, rpm-apidocs-4.8.0-38.el6_5, rpm-cron-4.8.0-38.el6_5
Fixes 1 record
Priority MEDIUM 44
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrat…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.07606 · Published 2014-12-16 · Fixed CWE-74
