<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 05:00:01 +0000</lastBuildDate>
    <item>
      <title>bdu:2024-07870</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2024-07870</link>
      <description>bdu:2024-07870</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2024-07870</guid>
    </item>
    <item>
      <title>certfr-2024-avi-1081 — De multiples vulnérabilités ont été découvertes dans les produits IBM.Certaines d'entre elles permettent à un attaquant…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081</link>
      <description>certfr-2024-avi-1081</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081</guid>
    </item>
    <item>
      <title>CLEANSTART-2026-IQ19736 — Security fix for CVE-2024-23454 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r0, spark-sc213-jdk17-py312 3.5.8-r0</title>
      <link>https://cve.radiocsirt.org/vuln/cleanstart-2026-iq19736</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: apache-hive, CleanStart: spark-sc213-jdk17-py312&lt;/p&gt;
&lt;p&gt;CVE-2024-23454 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: apache-hive, CleanStart: spark-sc213-jdk17-py312&lt;/p&gt;
&lt;p&gt;CVE-2024-23454 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cleanstart-2026-iq19736</guid>
    </item>
    <item>
      <title>EUVD-2026-252036</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-252036</link>
      <description>EUVD-2026-252036</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-252036</guid>
    </item>
    <item>
      <title>fkie_cve-2024-23454</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-23454</link>
      <description>&lt;p&gt;Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content.
This is because, on unix-like systems, the system temporary directory is
shared between all local users. As such, files written in this directory,
without setting the correct posix permissions explicitly, may be viewable
by all other local users.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content.
This is because, on unix-like systems, the system temporary directory is
shared between all local users. As such, files written in this directory,
without setting the correct posix permissions explicitly, may be viewable
by all other local users.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-23454</guid>
    </item>
    <item>
      <title>GHSA-f5fw-25gw-5m92 — Apache Hadoop: Temporary File Local Information Disclosure</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-f5fw-25gw-5m92</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: org.apache.hadoop:hadoop-common&lt;/p&gt;
&lt;p&gt;Apache Hadoop’s `RunJar.run()` does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all local users. As such, files written in this directory, without setting the correct posix permissions explicitly, may be viewable by all other local users.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: org.apache.hadoop:hadoop-common&lt;/p&gt;
&lt;p&gt;Apache Hadoop’s `RunJar.run()` does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all local users. As such, files written in this directory, without setting the correct posix permissions explicitly, may be viewable by all other local users.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-f5fw-25gw-5m92</guid>
    </item>
    <item>
      <title>gsd-2024-23454</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2024-23454</link>
      <description>gsd-2024-23454</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2024-23454</guid>
    </item>
    <item>
      <title>OESA-2024-2347 — hadoop-3.1 security update</title>
      <link>https://cve.radiocsirt.org/vuln/oesa-2024-2347</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: hadoop-3.1&lt;/p&gt;
&lt;p&gt;Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content.
This is because, on unix-like systems, the system temporary directory is
shared between all local users. As such, files written in this directory,
without setting the correct posix permissions explicitly, may be viewable
by all other local users.(CVE-2024-23454)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: hadoop-3.1&lt;/p&gt;
&lt;p&gt;Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content.
This is because, on unix-like systems, the system temporary directory is
shared between all local users. As such, files written in this directory,
without setting the correct posix permissions explicitly, may be viewable
by all other local users.(CVE-2024-23454)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/oesa-2024-2347</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-2215 — Apache Hadoop: Schwachstelle ermöglicht Offenlegung von Informationen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2215</link>
      <description>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in Apache Hadoop ausnutzen, um Informationen offenzulegen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in Apache Hadoop ausnutzen, um Informationen offenzulegen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2215</guid>
    </item>
  </channel>
</rss>
