Lucene search

K
rockyRockylinux Product ErrataRLSA-2024:1719
HistoryMay 06, 2024 - 1:04 p.m.

rear security update

2024-05-0613:04:21
Rockylinux Product Errata
errata.rockylinux.org
9
rear
security update
rocky linux 8
vulnerability
cvss
initrd
recovery
migration
utility
cve

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

An update is available for rear.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore to different hardware and can therefore be also used as a migration utility.

Security Fix(es):

  • rear: creates a world-readable initrd (CVE-2024-23301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky8aarch64rear< 2.6-11.el8_9rear-0:2.6-11.el8_9.aarch64.rpm
rocky8x86_64rear< 2.6-11.el8_9rear-0:2.6-11.el8_9.x86_64.rpm

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%