Red Hat Enterprise Linux (rpm-ostree): Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• Medium 6.2
  CVE-2024-2905

  Rpm-ostree: world-readable /etc/shadow file

  A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentiall…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Azure Linux
  Apr 25, 2024

Revision history

1. 2024-06-13 #3

   Neue Updates von Oracle Linux aufgenommen

2. 2024-06-11 #2

   Neue Updates von Red Hat aufgenommen

3. 2024-05-28 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2024:3401 vom 2024-05-28
  https://access.redhat.com/errata/RHSA-2024:3401
• Red Hat Security Advisory RHSA-2024:3823 vom 2024-06-12
  https://access.redhat.com/errata/RHSA-2024:3823
• Oracle Linux Security Advisory ELSA-2024-3823 vom 2024-06-13
  http://linux.oracle.com/errata/ELSA-2024-3823.html