Red Hat Security Advisory

RHSA-2019:3610

libqb security and bug fix update

Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) libqb-1.0.3-10.el8, libqb-devel-1.0.3-10.el8

Fixes 1 record

TI-2019-09565 CVE-2019-12779 · GHSA-wc62-h53h-g8qf

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack…

LOW 32

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00655 Published 2019-06-07 Partial fix CWE-59