rpm-cron vulnerabilities (TuxCare)
9 vulnerabilities.
rpm-cronTuxCareRpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm7.8 Highrpm-cronTuxCareRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)7.8 Highrpm-cronTuxCareRpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path7.8 Highrpm-cronTuxCareRpm: rpmbuild gettarspec() crafted tar member name → macro injection7.0 Highrpm-cronTuxCareIt was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only...6.7 Mediumrpm-cronTuxCareA symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and...6.7 Mediumrpm-cronTuxCareA race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to...6.4 Mediumrpm-cronTuxCareThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...4.7 Mediumrpm-cronTuxCareA flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...4.9 Medium