Red Hat Security AdvisoryRHSA-2020:1051
libosinfo security and bug fix update
Released 2020-03-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libosinfo-1.1.0-5.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libosinfo-devel-1.1.0-5.el7, libosinfo-vala-1.1.0-5.el7
- Red Hat Enterprise Linux Server (v. 7) libosinfo-1.1.0-5.el7, libosinfo-1.1.0-5.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libosinfo-devel-1.1.0-5.el7, libosinfo-devel-1.1.0-5.el7.ppc, libosinfo-vala-1.1.0-5.el7
- Red Hat Enterprise Linux Workstation (v. 7) libosinfo-1.1.0-5.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libosinfo-devel-1.1.0-5.el7, libosinfo-vala-1.1.0-5.el7
Fixes 1 record
Priority LOW 34
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00431 · Published 2019-07-05 · Fixed CWE-200
