PatchTheCVErpath linux vulnerabilities and fixes
Recent CVEs affecting rpath linux, with upgrade or downgrade steps. 6 tracked.
Also searched as: rpathlinux.
rpath linux has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-07-10. Highest priority: CVE-2007-1351 (score 58/100).
- CVE-2008-3139 MEDIUM 5.0 DOWNGRADE DOWNGRADE The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a d
- CVE-2008-3138 MEDIUM 5.0 DOWNGRADE DOWNGRADE The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote atta
- CVE-2008-1078 HIGH 7.2 MITIGATE MITIGATE expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users
- CVE-2007-5686 MEDIUM 4.9 MITIGATE initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to
- CVE-2007-1351 HIGH 8.5 MITIGATE DOWNGRADE Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2)
- CVE-2007-0536 HIGH 7.2 MITIGATE The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be in
FAQ
How do I fix rpath linux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rpath linux being exploited right now?
None of the tracked rpath linux CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rpath linux CVE should I patch first?
CVE-2007-1351 currently ranks highest (58/100): Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) .