Red Hat Security AdvisoryRHSA-2018:2284
yum-utils security update
Released 2018-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) yum-plugin-aliases-1.1.30-42.el6_10, yum-plugin-changelog-1.1.30-42.el6_10, yum-plugin-ovl-1.1.30-42.el6_10 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) yum-NetworkManager-dispatcher-1.1.30-42.el6_10, yum-plugin-auto-update-debug-info-1.1.30-42.el6_10, yum-plugin-fastestmirror-1.1.30-42.el6_10 +16
- Red Hat Enterprise Linux HPC Node (v. 6) yum-plugin-aliases-1.1.30-42.el6_10, yum-plugin-changelog-1.1.30-42.el6_10, yum-plugin-ovl-1.1.30-42.el6_10 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) yum-NetworkManager-dispatcher-1.1.30-42.el6_10, yum-plugin-auto-update-debug-info-1.1.30-42.el6_10, yum-plugin-fastestmirror-1.1.30-42.el6_10 +16
- Red Hat Enterprise Linux Server (v. 6) yum-plugin-aliases-1.1.30-42.el6_10, yum-plugin-changelog-1.1.30-42.el6_10, yum-plugin-ovl-1.1.30-42.el6_10 +5
- Red Hat Enterprise Linux Server Optional (v. 6) yum-NetworkManager-dispatcher-1.1.30-42.el6_10, yum-plugin-auto-update-debug-info-1.1.30-42.el6_10, yum-plugin-fastestmirror-1.1.30-42.el6_10 +16
- Red Hat Enterprise Linux Workstation (v. 6) yum-plugin-aliases-1.1.30-42.el6_10, yum-plugin-changelog-1.1.30-42.el6_10, yum-plugin-ovl-1.1.30-42.el6_10 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) yum-NetworkManager-dispatcher-1.1.30-42.el6_10, yum-plugin-auto-update-debug-info-1.1.30-42.el6_10, yum-plugin-fastestmirror-1.1.30-42.el6_10 +16
Fixes 1 record
Priority MEDIUM 44
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.05638 · Published 2018-08-01 · Partial fix CWE-59
