rpm-plugin-systemd-inhibit vulnerabilities (TuxCare)
9 vulnerabilities.
rpm-plugin-systemd-inhibitTuxCareRpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm7.8 Highrpm-plugin-systemd-inhibitTuxCareRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)7.8 Highrpm-plugin-systemd-inhibitTuxCareRpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path7.8 Highrpm-plugin-systemd-inhibitTuxCareRpm: rpmbuild gettarspec() crafted tar member name → macro injection7.0 Highrpm-plugin-systemd-inhibitTuxCareIt was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only...6.7 Mediumrpm-plugin-systemd-inhibitTuxCareA symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and...6.7 Mediumrpm-plugin-systemd-inhibitTuxCareA race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to...6.4 Mediumrpm-plugin-systemd-inhibitTuxCareThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...4.7 Mediumrpm-plugin-systemd-inhibitTuxCareA flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...4.9 Medium