Lucene search

K
redhatRedHatRHSA-2024:2577
HistoryApr 30, 2024 - 2:00 p.m.

(RHSA-2024:2577) Low: shadow-utils security update

2024-04-3014:00:10
access.redhat.com
9
rhsa-2024
shadow-utils
password leak
cve-2023-4641
unix
password files
user accounts
group accounts

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

The shadow-utils packages include programs for converting UNIX password files to
the shadow password format, as well as utilities for managing user and group
accounts.

Security Fix(es):

  • shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.