Skip to content
OpenAdvisories
Medium ALAS2-2019-1210 1 CVE

Moderate: libqb security update (Amazon Linux 2)

Published May 16, 2019 · Updated Jul 29, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-12779: libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL. 1695948: CVE-2019-12779 libqb: Insecure treatment of IPC (temporary) files

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 libqb 0:1.0.5-1.amzn2
Amazon Linux · 2 libqb-debuginfo 0:1.0.5-1.amzn2
Amazon Linux · 2 libqb-devel 0:1.0.5-1.amzn2

Vulnerabilities 1

  • Unscored —
    CVE-2019-12779

    libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable fi…

    libqb libqb Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-12779.html