OracleLinuxELSA-2020-4687oddjob security, bug fix, and enhancement update
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
[0.34.5-3]
- Support HOME_MODE from /etc/login.defs
Resolves: rhbz#1886362
[0.34.5-2] - Add gating tests using idm:DL1 module stream and upstream tests
Resolves: rhbz#1682457
[0.34.5-1] - Upstream release 0.34.5
- Resolves: rhbz#1833289 - Rebase oddjob to 0.34.5
- Resolves: rhbz#1833052 - CVE-2020-10737
oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | oddjob | < 0.34.5-3.el8 | oddjob-0.34.5-3.el8.src.rpm |
| oracle linux | 8 | aarch64 | oddjob | < 0.34.5-3.el8 | oddjob-0.34.5-3.el8.aarch64.rpm |
| oracle linux | 8 | aarch64 | oddjob-mkhomedir | < 0.34.5-3.el8 | oddjob-mkhomedir-0.34.5-3.el8.aarch64.rpm |
| oracle linux | 8 | src | oddjob | < 0.34.5-3.el8 | oddjob-0.34.5-3.el8.src.rpm |
| oracle linux | 8 | x86_64 | oddjob | < 0.34.5-3.el8 | oddjob-0.34.5-3.el8.x86_64.rpm |
| oracle linux | 8 | x86_64 | oddjob-mkhomedir | < 0.34.5-3.el8 | oddjob-mkhomedir-0.34.5-3.el8.x86_64.rpm |
Related
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P