python3-rpm vulnerabilities (Red Hat)
30 vulnerabilities.
-
python3-rpmRed Hat Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() 7.8 High -
python3-rpmRed Hat Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path 7.8 High -
python3-rpmRed Hat Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames 7.0 High -
python3-rpmRed Hat Rpm: rpmbuild gettarspec() crafted tar member name → macro injection 7.0 High -
python3-rpmRed Hat Rpm: heap buffer overflow in ndb slot table parsing 5.5 Medium -
python3-rpmRed Hat Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command 7.0 High -
python3-rpmRed Hat It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only... 6.7 Medium -
python3-rpmRed Hat A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and... 6.7 Medium -
python3-rpmRed Hat A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to... 6.4 Medium -
python3-rpmRed Hat There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary... 4.7 Medium -
python3-rpmRed Hat A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets... 5.5 Medium -
python3-rpmRed Hat A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who... 5.5 Medium -
python3-rpmRed Hat A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can... 4.9 Medium -
python3-rpmRed Hat A flaw was found in RPM's signature check functionality when reading a package file. This flaw... 7.0 High -
python3-rpmRed Hat Generation of Error Message Containing Sensitive Information in RESTEasy client 5.3 Medium -
python3-rpmRed Hat XSS in Action View 5.4 Medium -
python3-rpmRed Hat Untrusted users can run pending migrations in production in Rails 6.5 Medium -
python3-rpmRed Hat CSRF Vulnerability in rails-ujs 6.5 Medium -
python3-rpmRed Hat Ability to forge per-form CSRF tokens in Rails 4.3 Medium -
python3-rpmRed Hat Circumvention of file size limits in ActiveStorage 7.5 High -
python3-rpmRed Hat Possible Strong Parameters Bypass in ActionPack 7.5 High -
python3-rpmRed Hat ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore 9.8 Critical -
python3-rpmRed Hat Denial of Service in Netty 7.5 High -
python3-rpmRed Hat SQL injection in Django 8.8 High -
python3-rpmRed Hat Possible Information Leak / Session Hijack Vulnerability in Rack 6.3 Medium -
python3-rpmRed Hat Double Free in psutil 7.5 High -
python3-rpmRed Hat katello Improper Privilege Management vulnerability 4.3 Medium -
python3-rpmRed Hat rack-protection gem timing attack vulnerability when validating CSRF token 5.9 Medium -
python3-rpmRed Hat rest-client Gem Vulnerable to Session Fixation 9.8 Critical -
python3-rpmRed Hat rest-client allows local users to obtain sensitive information by reading the log 2.1 Low