rpm vulnerabilities (TuxCare)
9 vulnerabilities.
rpmTuxCareRpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm7.8 HighrpmTuxCareRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)7.8 HighrpmTuxCareRpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path7.8 HighrpmTuxCareRpm: rpmbuild gettarspec() crafted tar member name → macro injection7.0 HighrpmTuxCareIt was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only...6.7 MediumrpmTuxCareA symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and...6.7 MediumrpmTuxCareA race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to...6.4 MediumrpmTuxCareThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...4.7 MediumrpmTuxCareA flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...4.9 Medium