rpm-libs vulnerabilities (TuxCare)
9 vulnerabilities.
rpm-libsTuxCareRpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm7.8 Highrpm-libsTuxCareRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)7.8 Highrpm-libsTuxCareRpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path7.8 Highrpm-libsTuxCareRpm: rpmbuild gettarspec() crafted tar member name → macro injection7.0 Highrpm-libsTuxCareIt was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only...6.7 Mediumrpm-libsTuxCareA symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and...6.7 Mediumrpm-libsTuxCareA race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to...6.4 Mediumrpm-libsTuxCareThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...4.7 Mediumrpm-libsTuxCareA flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...4.9 Medium