[CLSA-2026:1792688690] amanda: Fix of CVE-2023-30577
Type:
security
Severity:
Important
Release date:
2026-10-25 22:50:47 UTC
Description:
- CVE-2023-30577: filter tar options in the SUID runtar helper through an allow list to prevent local privilege escalation to root
CVEs fixed:
Updated packages:
  • amanda-3.3.3-22.el7.tuxcare.els1.aarch64.rpm
    sha:f743fc37fa683dfd862a4e68e3eb19363d70e128f65f3883f43c54a4fee0b7bc
  • amanda-3.3.3-22.el7.tuxcare.els1.i686.rpm
    sha:cfa77e01939f7c1e56de2338ee44a0e6545d8e6dde5da98a3b25992bed643375
  • amanda-3.3.3-22.el7.tuxcare.els1.x86_64.rpm
    sha:146f861388aaef0ee51a332af3ef8c062a4389e393cc3ce6464ba0ef3851e4ec
  • amanda-client-3.3.3-22.el7.tuxcare.els1.aarch64.rpm
    sha:eb29841868d38e20f1225e4cd415bc3caad49a1db85db9aedddaf3fde608061b
  • amanda-client-3.3.3-22.el7.tuxcare.els1.i686.rpm
    sha:37c531789eb6017983961b667e0c80195219044d2b854ef98f6eac522fcd7226
  • amanda-client-3.3.3-22.el7.tuxcare.els1.x86_64.rpm
    sha:ddf809bad2d3485d444dd6aac946b247f18a6100e79724e07943c17cc3ba007a
  • amanda-libs-3.3.3-22.el7.tuxcare.els1.aarch64.rpm
    sha:500088355664871588a8c184115e5d5b79c0abd4e0ee3b9107e34bf0dd798f91
  • amanda-libs-3.3.3-22.el7.tuxcare.els1.i686.rpm
    sha:6aa1a095f146a9dbc1990803a2ad735910d1bbf170e6b9ddc278f7f4e2a76251
  • amanda-libs-3.3.3-22.el7.tuxcare.els1.x86_64.rpm
    sha:41537d06f86ec19a167a5b024cb3d4b580650200f17a85fe03c47cea59ed2625
  • amanda-server-3.3.3-22.el7.tuxcare.els1.aarch64.rpm
    sha:2222c53c31e3d660227396130a9a980c97f17a0bd7a0f4a3c039eef3a4094db6
  • amanda-server-3.3.3-22.el7.tuxcare.els1.i686.rpm
    sha:bacd9dcb4711ef9836d2eeff3f3be8b670c1020451f9a9108385ac61bb322d46
  • amanda-server-3.3.3-22.el7.tuxcare.els1.x86_64.rpm
    sha:31d51cb14e56f84d3de960fee9a9243dff67dc673adbe7bc706a43800e769108
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.