Debian/rpm: unknown
rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde)
Action: Upgrade rpm to 4.8.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.1-1 | - |
Fixed versions
| 4.8.1-1 |
Sources
published · modified · JSON