Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:3823
HistoryJun 11, 2024 - 6:27 p.m.

(RHSA-2024:3823) Moderate: rpm-ostree security update

2024-06-1118:27:26
access.redhat.com
2
rpm-ostree
security update
world-readable file

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low

JSON

The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks.

Security Fix(es):

  • rpm-ostree: world-readable /etc/shadow file [9.4.z] (JIRA:RHEL-31852)
OSVersionArchitecturePackageVersionFilename
RedHat9aarch64rpm-ostree-libs< 2024.3-3.el9_4rpm-ostree-libs-2024.3-3.el9_4.aarch64.rpm
RedHat9s390xrpm-ostree-debugsource< 2024.3-3.el9_4rpm-ostree-debugsource-2024.3-3.el9_4.s390x.rpm
RedHat9ppc64lerpm-ostree< 2024.3-3.el9_4rpm-ostree-2024.3-3.el9_4.ppc64le.rpm
RedHat9aarch64rpm-ostree-libs-debuginfo< 2024.3-3.el9_4rpm-ostree-libs-debuginfo-2024.3-3.el9_4.aarch64.rpm
RedHat9aarch64rpm-ostree-debugsource< 2024.3-3.el9_4rpm-ostree-debugsource-2024.3-3.el9_4.aarch64.rpm
RedHat9aarch64rpm-ostree-debuginfo< 2024.3-3.el9_4rpm-ostree-debuginfo-2024.3-3.el9_4.aarch64.rpm
RedHat9x86_64rpm-ostree-libs-debuginfo< 2024.3-3.el9_4rpm-ostree-libs-debuginfo-2024.3-3.el9_4.x86_64.rpm
RedHat9x86_64rpm-ostree-debuginfo< 2024.3-3.el9_4rpm-ostree-debuginfo-2024.3-3.el9_4.x86_64.rpm
RedHat9i686rpm-ostree-libs< 2024.3-3.el9_4rpm-ostree-libs-2024.3-3.el9_4.i686.rpm
RedHat9i686rpm-ostree-debuginfo< 2024.3-3.el9_4rpm-ostree-debuginfo-2024.3-3.el9_4.i686.rpm
Rows per page:
1-10 of 241

Related

nessus 6
nvd 1
fedora 2
osv 1
oraclelinux 1
openvas 2
cve 1
vulnrichment 1
cvelist 1
redhatcve 1
redhat 1
nessus
nessus
RHEL 9 : rpm-ostree (RHSA-2024:3823)
2024-06-12 00:00:00
RHEL 9 : rpm-ostree (RHSA-2024:3401)
2024-05-28 00:00:00
Fedora 40 : rpm-ostree (2024-589189d414)
2024-04-29 00:00:00
nvd
nvd
CVE-2024-2905
2024-04-25 18:15:08
fedora
fedora
[SECURITY] Fedora 40 Update: rpm-ostree-2024.4-5.fc40
2024-04-10 03:13:06
[SECURITY] Fedora 39 Update: rpm-ostree-2024.4-6.fc39
2024-04-10 04:06:21
osv
osv
Moderate: rpm-ostree security update
2024-06-11 00:00:00
oraclelinux
oraclelinux
rpm-ostree security update
2024-06-12 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-4afd3d38ae)
2024-09-10 00:00:00
Fedora: Security Advisory (FEDORA-2024-589189d414)
2024-09-10 00:00:00
cve
cve
CVE-2024-2905
2024-04-25 18:15:08
vulnrichment
vulnrichment
CVE-2024-2905 Rpm-ostree: world-readable /etc/shadow file
2024-04-25 17:44:15
cvelist
cvelist
CVE-2024-2905 Rpm-ostree: world-readable /etc/shadow file
2024-04-25 17:44:15
redhatcve
redhatcve
CVE-2024-2905
2024-04-09 11:51:02
redhat
redhat
(RHSA-2024:3401) Moderate: rpm-ostree security update
2024-05-28 12:59:27

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low

JSON
Related for RHSA-2024:3823
nessus6nvd1fedora2osv1oraclelinux1openvas2cve1vulnrichment1cvelist1redhatcve1redhat1