CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-7

CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-7. A patched version of the package is available...

CVE-2023-26964 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2023-26964 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27308 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2024-27308 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 39 Update: rpm-ostree-2024.4-6.fc39

rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additiona...

[SECURITY] Fedora 40 Update: rpm-ostree-2024.4-5.fc40

rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additiona...

Fedora 39 : rpm-ostree (2024-4afd3d38ae)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4afd3d38ae advisory. Backport fix for /etc/gshadow permissions Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

CVE-2024-2905

A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication da...

openEuler 安全漏洞

openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler rpm-ostree, which stems from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication data to unauthorized access...

PT-2024-5018 · Unknown +2 · Rpm-Ostree +2

Name of the Vulnerable Software and Affected Versions: rpm-ostree affected versions not specified Description: A security issue has been found in rpm-ostree, related to the /etc/shadow file having the world-readable bit enabled in default builds. This is due to default permissions being set highe...

AZL-35748 CVE-2024-27308 affecting package rpm-ostree for versions less than 2024.4-1

Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry. The impact of this vulnerability depends on how mio is used. For some...

Advisory ROSA-SA-2024-2342

software: ostree 2022.7 WASP: ROSA-CHROME packageevrstring: ostree-2022.7-1.src.rpm CVE-ID: CVE-2022-47085 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The issue detected in ostree allows attackers to cause a denial of service or other unspecified consequences using the printpanic function in...

CVE-2022-47085

A flaw was found in printpanic function in the repocheckoutfilter.rs in ostree. By sending a specially crafted request, a remote attacker could cause a denial of service...

RHEL 7 : subscription-manager (RHSA-2023:4701)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4701 advisory. The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Red Hat...

CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-5

CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-5. A patched version of the package is available...

ostree bug fix update

An update is available for ostree. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OSTree is a tool for managing bootable, immutable, versioned file system trees...

Important Photon OS Security Update - PHSA-2023-4.0-0442

Updates of 'ostree' packages of Photon OS have been released...

An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo_checkout_filter.rs.

...

SUSE CVE-2022-47085

An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...

GHSA-X96G-95FQ-4XV4 libostree vulnerable to denial of service attack

An issue was discovered in ostree before version 0.17.1 allows attackers to cause a denial of service via the printpanic function in repocheckoutfilter.rs...

ostree-ext (>=0.1.0, <=0.9.1) potentially affected by CVE-2022-47085 via ostree (>=0.11.0, <=0.15.0)

ostree CARGO version =0.11.0, =0.1.0, =0.9.1 Source cves: CVE-2022-47085 Source advisory: OSV:GHSA-X96G-95FQ-4XV4...