RPM Package Update and Removal File Attribute Security Bypass Vulnerabilities

RPM Package Update and Removal File Attribute Security Bypass Vulnerabilities

References:

Bug 598775 â?? rpm: Fails to remove the SUID/SGID bits on package upgrade (Matt McCutchen )
CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH (Jan Lieskovsky)
Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (Jan Lieskovsky)
RPM Homepage (RPM)
Strip s-bits on upgrade too (RhBug:598775) (Panu Matilainen)
rpm security and bug fix update (RHSA-2010-0679) (Avaya)
rpm security update (RHSA-2010-0678) (Avaya)
VMWare Security Advisory: VMSA-2011-0004 (VMWare)

Privacy Statement
Copyright 2010, SecurityFocus