Red Hat Security AdvisoryRHSA-2020:5435
python-rtslib security update
Released 2020-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python-rtslib-2.1.74-1.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) python-rtslib-doc-2.1.74-1.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-rtslib-doc-2.1.74-1.el7_9
- Red Hat Enterprise Linux Server (v. 7) python-rtslib-2.1.74-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) python-rtslib-doc-2.1.74-1.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) python-rtslib-2.1.74-1.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) python-rtslib-doc-2.1.74-1.el7_9
Fixes 1 record
Priority LOW 34
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00339 · Published 2020-06-19 · Partial fix · 2.1.73 CWE-276
