Medium ELSA-2024-1719 1 CVE

Moderate: rear security update (Oracle Linux 8)

Published Apr 9, 2024 · Updated Apr 9, 2024

Ecosystem: Oracle Linux

Summary

[2.6-11.0.1]
- Change OS_VENDOR to OracleServer

[2.6-11]
- make initrd accessible only by root (CVE-2024-23301), PR 3123

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	rear	0:2.6-11.0.1.el8_9

Vulnerabilities 1

Medium 5.5

CVE-2024-23301

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local at…

rear rear rear Debian Ubuntu Azure Linux

Jan 12, 2024