Summary
[1.1.0-5]
- Resolves: rhbz#1740212 - New defect found in libosinfo-1.1.0-4.el7
[1.1.0-4]
- Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
option leaks password via command line argument
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libosinfo | 0:1.1.0-5.el7 |
| Oracle Linux · 7 | libosinfo-devel | 0:1.1.0-5.el7 |
| Oracle Linux · 7 | libosinfo-vala | 0:1.1.0-5.el7 |
Vulnerabilities 1
-
Unscored —
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osin…