RHSA-2024:0463MediumCVSS 6.5

Red Hat Security Advisory: rpm security update

Published
January 25, 2024
Last Modified
June 26, 2026

🔗 CVE IDs covered (3)

CVE-2021-35937 →CVE-2021-35938 →CVE-2021-35939 →

📋 Description

CVE-2021-35937 — rpm: TOCTOU race in checks for unsafe symlinks CVE-2021-35938 — rpm: races with chown/chmod/capabilities calls during installation CVE-2021-35939 — rpm: checks for unsafe symlinks are not performed for intermediary directories

🔗 References (6)