Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Privilegieneskalation und Codeausführung

Summary

Product

Vulnerabilities 2

• High 7.0
  CVE-2024-6655

  Gtk3: gtk2: library injection from cwd

  A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 16, 2024
• Medium 6.7
  CVE-2024-5742

  Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

  A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportuni…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jun 12, 2024

Revision history

1. 2025-01-07 #6

   Neue Updates von SUSE aufgenommen

2. 2024-11-11 #5

   Neue Updates von Red Hat aufgenommen

3. 2024-10-15 #4

   Neue Updates von Ubuntu aufgenommen

4. 2024-09-30 #3

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

5. 2024-09-24 #2

   Neue Updates von Oracle Linux aufgenommen

6. 2024-09-23 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-09-23
  https://access.redhat.com/errata/RHSA-2024:6963
• Red Hat Security Advisory vom 2024-09-23
  https://access.redhat.com/errata/RHSA-2024:6986
• Oracle Linux Security Advisory ELSA-2024-6963 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6963.html
• Oracle Linux Security Advisory ELSA-2024-6986 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6986.html
• Rocky Linux Security Advisory RLSA-2024:6963 vom 2024-09-30
  https://errata.build.resf.org/RLSA-2024:6963
• Ubuntu Security Notice USN-7064-1 vom 2024-10-15
  https://ubuntu.com/security/notices/USN-7064-1
• Red Hat Security Advisory RHSA-2024:9184 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9184
• Red Hat Security Advisory RHSA-2024:9430 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9430
• SUSE Security Update SUSE-SU-2025:0031-1 vom 2025-01-07
  https://lists.suse.com/pipermail/sle-security-updates/2025-January/020067.html