Vulnerability in make package - ALBA-2022:2015
Summary
ALBA-2022:2015: make bug fix and enhancement update. Affects make versions < 1:4.2.1-11.el8. Fixed in 1:4.2.1-11.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The make package is a build automation tool that automatically builds executable programs and libraries from source code by reading files called makefiles. It is widely used in software development projects to streamline the build process. The make package in AlmaLinux:8 is affected by a vulnerability that has been addressed in the latest update.
Vulnerability Detail
The vulnerability (ALBA-2022:2015) in the make package allows an attacker to execute arbitrary code or cause a denial of service (DoS) by exploiting a bug. This bug has been fixed in version 1:4.2.1-11.el8 of the make package. The vulnerability could potentially lead to unauthorized access, data leakage, or system compromise if left unpatched.
How To Fix
Minimum fixed version
1:4.2.1-11.el8
This is the first release that contains the fix.
sudo dnf update makeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the make package to the latest version.
Conclusion
The vulnerability in the make package (ALBA-2022:2015) has been addressed in the latest update. To ensure the security of your system, it is crucial to update the make package to version 1:4.2.1-11.el8 or later. If you have any further questions or need assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for make →
FAQ
The make package is a build automation tool used to compile and build software projects from source code.
The vulnerability allows an attacker to execute arbitrary code or cause a denial of service, potentially leading to unauthorized access or system compromise.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for vulnerabilities.
Yes, a fix is available in version 1:4.2.1-11.el8 of the make package. It is recommended to update to this version or later.
No, there are no known workarounds for this vulnerability. Updating the make package is the only solution.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
