(RHSA-2024:1719) Moderate: rear security update

2024-04-0914:08:16

access.redhat.com

relax-and-recover recovery migration utility world-readable initrd cve-2024-23301

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore to different hardware and can therefore be also used as a migration utility.

Security Fix(es):

rear: creates a world-readable initrd (CVE-2024-23301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8s390xrear< 2.6-11.el8_9rear-2.6-11.el8_9.s390x.rpm
RedHat8aarch64rear< 2.6-11.el8_9rear-2.6-11.el8_9.aarch64.rpm
RedHat8ppc64lerear< 2.6-11.el8_9rear-2.6-11.el8_9.ppc64le.rpm
RedHat8x86_64rear< 2.6-11.el8_9rear-2.6-11.el8_9.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	s390x	rear	< 2.6-11.el8_9	rear-2.6-11.el8_9.s390x.rpm
RedHat	8	aarch64	rear	< 2.6-11.el8_9	rear-2.6-11.el8_9.aarch64.rpm
RedHat	8	ppc64le	rear	< 2.6-11.el8_9	rear-2.6-11.el8_9.ppc64le.rpm
RedHat	8	x86_64	rear	< 2.6-11.el8_9	rear-2.6-11.el8_9.x86_64.rpm