RHSA-2010:0678: Moderate: rpm security update
The RPM Package Manager (RPM) is a command line driven package managementsystem capable of installing, uninstalling, verifying, querying, andupdating software packages.It was discovered that RPM did not remove setuid and setgid bits set onbinaries when upgrading or removing packages. A local attacker able tocreate hard links to binaries could use this flaw to keep those binaries onthe system, at a specific version level and with the setuid or setgid bitset, even if the package providing them was upgraded or removed by a systemadministrator. This could have security implications if a package wasupgraded or removed because of a security flaw in a setuid or setgidprogram. (CVE-2005-4889, CVE-2010-2059)All users of rpm are advised to upgrade to these updated packages, whichcontain a backported patch to correct these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2010:0678?
The severity of RHSA-2010:0678 is classified as moderate.
How do I fix RHSA-2010:0678?
To fix RHSA-2010:0678, upgrade the affected RPM packages to version 4.3.3-33_nonptl.el4_8.1 or later.
What packages are affected by RHSA-2010:0678?
The affected packages in RHSA-2010:0678 include rpm, popt, rpm-build, rpm-devel, rpm-libs, and rpm-python.
What vulnerability does RHSA-2010:0678 address?
RHSA-2010:0678 addresses a vulnerability where the RPM Package Manager fails to remove setuid and setgid bits on binaries during upgrades.
Is RHSA-2010:0678 related to command line tools?
Yes, RHSA-2010:0678 is related to the RPM Package Manager, which is a command line driven package management system.