rpm-ostree security update

2024-06-1200:00:00

linux.oracle.com

backported fix

ghsa-2m76-cwhg-7wv6

rhel-31852

unix

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

[2024.3-3]

Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
Resolves: #RHEL-31852
[2024.3-2]
Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
Resolves: #RHEL-31852

OSVersionArchitecturePackageVersionFilename
oracle linux9srcrpm-ostree< 2024.3-3.el9_4rpm-ostree-2024.3-3.el9_4.src.rpm
oracle linux9aarch64rpm-ostree< 2024.3-3.el9_4rpm-ostree-2024.3-3.el9_4.aarch64.rpm
oracle linux9aarch64rpm-ostree-libs< 2024.3-3.el9_4rpm-ostree-libs-2024.3-3.el9_4.aarch64.rpm
oracle linux9srcrpm-ostree< 2024.3-3.el9_4rpm-ostree-2024.3-3.el9_4.src.rpm
oracle linux9x86_64rpm-ostree< 2024.3-3.el9_4rpm-ostree-2024.3-3.el9_4.x86_64.rpm
oracle linux9i686rpm-ostree-libs< 2024.3-3.el9_4rpm-ostree-libs-2024.3-3.el9_4.i686.rpm
oracle linux9x86_64rpm-ostree-libs< 2024.3-3.el9_4rpm-ostree-libs-2024.3-3.el9_4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	rpm-ostree	< 2024.3-3.el9_4	rpm-ostree-2024.3-3.el9_4.src.rpm
oracle linux	9	aarch64	rpm-ostree	< 2024.3-3.el9_4	rpm-ostree-2024.3-3.el9_4.aarch64.rpm
oracle linux	9	aarch64	rpm-ostree-libs	< 2024.3-3.el9_4	rpm-ostree-libs-2024.3-3.el9_4.aarch64.rpm
oracle linux	9	src	rpm-ostree	< 2024.3-3.el9_4	rpm-ostree-2024.3-3.el9_4.src.rpm
oracle linux	9	x86_64	rpm-ostree	< 2024.3-3.el9_4	rpm-ostree-2024.3-3.el9_4.x86_64.rpm
oracle linux	9	i686	rpm-ostree-libs	< 2024.3-3.el9_4	rpm-ostree-libs-2024.3-3.el9_4.i686.rpm
oracle linux	9	x86_64	rpm-ostree-libs	< 2024.3-3.el9_4	rpm-ostree-libs-2024.3-3.el9_4.x86_64.rpm