tocsin

Debian/rpm: unknown

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the sign

Action: Upgrade rpm to 4.11.3-1.1 or later.

Affected

introducedfixedlast affected
04.11.3-1.1-

Fixed versions

4.11.3-1.1

Sources

published · modified · JSON