Description
Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | brlapi +1 | 0.4.1-4.el5 | RHSA-2010:0181 |
| RHEL 5 | brltty | 3.7.2-4.el5 | RHSA-2010:0181 |
Advisories 1
- RHSA-2010:0181 Red Hat Security Advisory: brltty security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=457942
- RHSA-2010:0181 vendor-advisory
- ADV-2010-0755 vdb-entry
- 39231 third-party-advisory
- oval:org.mitre.oval:def:11399 vdb-entry signature