rpm-devel vulnerabilities (TuxCare)
9 vulnerabilities.
rpm-develTuxCareRpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm7.8 Highrpm-develTuxCareRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)7.8 Highrpm-develTuxCareRpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path7.8 Highrpm-develTuxCareRpm: rpmbuild gettarspec() crafted tar member name → macro injection7.0 Highrpm-develTuxCareIt was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only...6.7 Mediumrpm-develTuxCareA symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and...6.7 Mediumrpm-develTuxCareA race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to...6.4 Mediumrpm-develTuxCareThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...4.7 Mediumrpm-develTuxCareA flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...4.9 Medium