Most recent entries from all

ALSA-2024:1147 — Moderate: rear security update

Affected: AlmaLinux:9: rear

Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore to different hardware and can therefore be also used as a migration utility.

Security Fix(es):

* rear: creates a world-readable initrd (CVE-2024-23301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-00450

EUVD-2026-263091

fkie_cve-2024-23301

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.

GHSA-5g36-x562-44f9

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.

gsd-2024-23301

OESA-2024-1077 — rear security update

Affected: openEuler:20.03-LTS-SP1: rear, openEuler:20.03-LTS-SP4: rear, openEuler:22.03-LTS: rear, openEuler:22.03-LTS-SP1: rear, openEuler:22.03-LTS-SP2: rear, openEuler:22.03-LTS-SP3: rear

Relax-and-Recover is a setup-and-forget Linux bare metal disaster recovery solution. It is easy to set up and requires no maintenance so there is no excuse for not using it. Security Fix(es): Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.(CVE-2024-23301)

openSUSE-SU-2024:13612-1 — rear-2.7-2.1 on GA media

rear-2.7-2.1 on GA media

SUSE-SU-2024:0135-1 — Security update for rear27a

Security update for rear27a

UBUNTU-CVE-2024-23301

Affected: Ubuntu:18.04:LTS: rear, Ubuntu:20.04:LTS: rear, Ubuntu:22.04:LTS: rear

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.

WID-SEC-W-2024-0558 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren oder um vertrauliche Informationen offenzulegen.