Medium ELSA-2024-1147 1 CVE

Moderate: rear security update (Oracle Linux 9)

Published Mar 6, 2024 · Updated Mar 6, 2024

Ecosystem: Oracle Linux

Summary

[2.6-21.0.1]
- rear: creates a world-readable initrd (CVE-2024-23301)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	rear	0:2.6-21.0.1.el9_3

Vulnerabilities 1

Medium 5.5

CVE-2024-23301

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local at…

rear rear rear Debian Ubuntu Azure Linux

Jan 12, 2024