Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| dnf5 | fixed | 5.4.2.0-1 | package |
Примечания
https://bugzilla.redhat.com/show_bug.cgi?id=2445770
https://github.com/rpm-software-management/dnf5/pull/2643
https://github.com/rpm-software-management/dnf5/commit/ef98e1cc9a7b084a1ee70723206b3a5f450c48ee (5.4.1.0)
Связанные уязвимости
CVSS3: 5.5
redhat
5 месяцев назад
A flaw was found in dnf5. A local, unprivileged attacker can exploit a path traversal vulnerability in the D-Bus locale configuration. By providing a specially crafted string to the locale key during session opening, the attacker can force the dnf5daemon-server to terminate, leading to an application-level Denial of Service (DoS) with a core dump.