Skip to content
OpenAdvisories
Medium ELSA-2020-1189 1 CVE

Moderate: libqb security update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Summary

[1.0.1-9]
Also add O_EXCL to log_blackbox.c when creating files
Resolves: rhbz#1714853

[1.0.1-8]
Improve socket security
Resolves: rhbz#1714853

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 libqb 0:1.0.1-9.el7
Oracle Linux · 7 libqb-devel 0:1.0.1-9.el7

Vulnerabilities 1

  • Unscored —

    libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable fi…