Fedora: Security Advisory for java-latest-openjdk (FEDORA-2021-b277e63494)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-32553

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...

CVE-2021-32553

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...

CVE-2021-32553

CVE-2021-32553 concerns the read_file() function in apport/hookutils.py, which could follow symbolic links or open FIFOs when invoked by the openjdk-17 package apport hooks. This behavior could allow a local attacker to access private data exposed to other local users. Public references in the co...

CVE-2021-32553 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...

CVE-2021-32553

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The addinfo function allows arbitary file read in openjdk-17...

PT-2021-19776

Name of the Vulnerable Software and Affected Versions openjdk-17 Description A issue was found where the read file function in apport/hookutils.py could follow symbolic links or open FIFOs, potentially exposing private data to other local users when used by the openjdk-17 package apport hooks...

CVE-2021-32553

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...