coreos/rpm-ostree

on GitHub

100 releases

new releases every 4 weeks 1 day

last release was 04/15/2024

last checked today at 5:23 PM

822

⚛📦 Hybrid image/package system with atomic upgrades and package layering

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2024-2905	April 25, 2024	N/A	N/A
A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication data to unauthorized access.