Stay Secure with the Latest Linux Advisories

security advisorysecurity updatepermission issue

Mageia: 2020-0434 moderate: python-xmlparser security flaw

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resulting in a loss of integrity depending on their permission settings . MGASA-2020-0336 - Updated python-rstlib packages fix security vulnerability Publication date: 18 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0336.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-14019 Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resulting in a loss of integrity depending on their permission settings (CVE-2020-14019). References: - https://bugs.mageia.org/show_bug.cgi?id=27042 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/TNMCV2DJJTX345YYBXAMJBXNNVUZQ5UH/ - https://www.cve.org/CVERecord?id=CVE-2020-14019 SRPMS: - 7/core/python-rtslib-2.1.73-1.mga7 . Recent updates to the python-rstlib packages address inadequate permissions in Mageia, bolstering overall system reliability and protection.. Python Rstlib, Mageia Security, Permissions Update, Integrity Protection, Security Advisory. . LinuxSecurity.com Team

Aug 18, 2020 Mageia