https://bugzilla.redhat.com/show_bug.cgi?id=2097310
Mauro Matteo Cascella <mcascell(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Comment|0 |updated
--- Comment #0 has been edited ---
When the CVE-2022-1292 was fixed it was not discovered that there are other
places in the script where the file names of certificates being hashed were
possibly passed to a command executed through the shell. This script is
distributed by some operating systems in a manner where it is automatically
executed. On such operating systems, an attacker could execute arbitrary
commands with the privileges of the script.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2097310