Red Hat Linux fixes vulnerabilities in the "libuser" Library

Red Hat Linux fixes vulnerabilities in the "libuser" Library

Red Hat has fixed two vulnerabilities in the "libuser" library, which can be exploited by a local attacker to escalate permissions to the root user.

The libuser Library provides an interface for operating and managing users and group accounts. This software package is installed in Red Hat Enterprise Linux (RHEL) by default, while other Linux distributions come from the Red Hat code library.

The vulnerability was discovered by Qualys researchers at the security company. They published a proof-of-concept (PoC) on Thursday, showing how the vulnerability was exploited.

This vulnerability affects all versions of libuser libraries in RHEL6 and 7. We recommend that you install the libuser update package.