Red Hat Security Advisory

RHSA-2024:4256

less security update

Released 2024-07-02 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2024-21380 CVE-2024-32487 · GHSA-f53j-pgm5-c4r3

MEDIUM 46

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00628 Published 2024-04-13 Partial fix CWE-96

TI-2022-24156 CVE-2022-48624 · GHSA-p647-4jrw-p827

LOW 36

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01059 Published 2024-02-19 Partial fix CWE-78