Red Hat Security AdvisoryRHSA-2015:0986
kexec-tools security, bug fix, and enhancement update
Released 2015-05-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kexec-tools-2.0.7-19.el7_1.2
- Red Hat Enterprise Linux Client Optional (v. 7) kexec-tools-anaconda-addon-2.0.7-19.el7_1.2, kexec-tools-eppic-2.0.7-19.el7_1.2
- Red Hat Enterprise Linux ComputeNode (v. 7) kexec-tools-2.0.7-19.el7_1.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kexec-tools-anaconda-addon-2.0.7-19.el7_1.2, kexec-tools-eppic-2.0.7-19.el7_1.2
- Red Hat Enterprise Linux Server (v. 7) kexec-tools-2.0.7-19.ael7b_1.2, kexec-tools-2.0.7-19.el7_1.2
- Red Hat Enterprise Linux Server Optional (v. 7) kexec-tools-anaconda-addon-2.0.7-19.ael7b_1.2, kexec-tools-anaconda-addon-2.0.7-19.el7_1.2, kexec-tools-eppic-2.0.7-19.ael7b_1.2 +1
- Red Hat Enterprise Linux Workstation (v. 7) kexec-tools-2.0.7-19.el7_1.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) kexec-tools-anaconda-addon-2.0.7-19.el7_1.2, kexec-tools-eppic-2.0.7-19.el7_1.2
Fixes 1 record
Priority LOW 17
The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a tempora…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00355 · Published 2015-05-19 · Fixed
