-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-89a3999673 2018-10-30 17:13:37.322464 --------------------------------------------------------------------------------
Name : rpm Product : Fedora 29 Version : 4.14.2.1 Release : 1.fc29 URL : http://www.rpm.org/ Summary : The RPM package management system Description : The RPM Package Manager (RPM) is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a description, etc.
-------------------------------------------------------------------------------- Update Information:
An unfortunate regression in rpm 4.14.2 causes --setperms to behave incorrectly on symbolic links: file and directory permissions become world writable and executable on symlink targets. A similar flaw exists in --setugids, but it is less exploitable. If you have used --setperms (or --setugids, or --restore) with rpm 4.14.2, you should ensure system integrity with rpm --verify before proceeding to correct any mixed up permissions and ownerships to avoid possibly giving suid capabilities to a modified binary. Further details of the --setperms bug available upstream: http://rpm.org/wiki/Releases/4.14.2.1 **Note that this update can not automatically fix possible damage done by using ���setperms, ���setugids or ���restore with rpm 4.14.2, it merely fixes the functionlity itself. Any damage needs to be investigated and fixed manually, such as using ���verify and ���restore or reinstalling packages.** -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 22 2018 Panu Matilainen pmatilai@redhat.com - 4.14.2.1-1 - Update to rpm 4.14.2.1 (http://rpm.org/wiki/Releases/4.14.2.1) --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-89a3999673' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org