Red Hat Security Advisory

RHSA-2024:3823

rpm-ostree security update

Released 2024-06-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) rpm-ostree-2024.3-3.el9_4, rpm-ostree-libs-2024.3-3.el9_4

Fixes 1 record

TI-2024-02713 CVE-2024-2905

Rpm-ostree: world-readable /etc/shadow file

LOW 28

A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00328 Published 2024-04-25 Fixed in 2025.5-1.el10, 2024.3-3.el9_4 +1 CWE-732