CVE:CVE-2017-2623
CNNVD:CNNVD-201703-186
Project Atomic rpm-ostree是一个影像系统包。
rpm-ostree 2017.3之前版本和rpm-ostree-client 2017.3之前版本中存在安全绕过漏洞，该漏洞源于程序没有正确的检查GPG签名。远程攻击者可利用该漏洞绕过安全限制，并执行未授权的操作。
solution:Upgrade rpm-ostree rpm-ostree to a higher version than 2017.3,and avoid the version (,2017.3); Upgrade rpm-ostree rpm-ostree-client to a higher version than 2017.3,and avoid the version (,2017.3); Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0