Skip to content
OpenAdvisories
Low ELSA-2015-2369 1 CVE

Low: openhpi security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 23, 2015 · Updated Nov 23, 2015

Ecosystem: Oracle Linux

Summary

[3.4.0-2]
- fix /var/lib/openhpi permissions
- Resolves: rhbz#1063367

[3.4.0-1]
- update to 3.4.0 (#1127908)
- Resolves: rhbz#1127908,rhbz#948461,rhbz#1208127,rhbz#1201827

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 openhpi 0:3.4.0-2.el7
Oracle Linux · 7 openhpi-devel 0:3.4.0-2.el7
Oracle Linux · 7 openhpi-libs 0:3.4.0-2.el7

Vulnerabilities 1

  • Unscored —
    CVE-2015-3248

    openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allow…