Red Hat Security AdvisoryRHSA-2018:2285
yum-utils security update
Released 2018-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) yum-plugin-aliases-1.1.31-46.el7_5, yum-plugin-changelog-1.1.31-46.el7_5, yum-plugin-ovl-1.1.31-46.el7_5 +4
- Red Hat Enterprise Linux Client Optional (v. 7) yum-NetworkManager-dispatcher-1.1.31-46.el7_5, yum-plugin-auto-update-debug-info-1.1.31-46.el7_5, yum-plugin-copr-1.1.31-46.el7_5 +18
- Red Hat Enterprise Linux ComputeNode (v. 7) yum-plugin-aliases-1.1.31-46.el7_5, yum-plugin-changelog-1.1.31-46.el7_5, yum-plugin-ovl-1.1.31-46.el7_5 +4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) yum-NetworkManager-dispatcher-1.1.31-46.el7_5, yum-plugin-auto-update-debug-info-1.1.31-46.el7_5, yum-plugin-copr-1.1.31-46.el7_5 +18
- Red Hat Enterprise Linux Server (v. 7) yum-plugin-aliases-1.1.31-46.el7_5, yum-plugin-changelog-1.1.31-46.el7_5, yum-plugin-ovl-1.1.31-46.el7_5 +4
- Red Hat Enterprise Linux Server Optional (v. 7) yum-NetworkManager-dispatcher-1.1.31-46.el7_5, yum-plugin-auto-update-debug-info-1.1.31-46.el7_5, yum-plugin-copr-1.1.31-46.el7_5 +18
- Red Hat Enterprise Linux Workstation (v. 7) yum-plugin-aliases-1.1.31-46.el7_5, yum-plugin-changelog-1.1.31-46.el7_5, yum-plugin-ovl-1.1.31-46.el7_5 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) yum-NetworkManager-dispatcher-1.1.31-46.el7_5, yum-plugin-auto-update-debug-info-1.1.31-46.el7_5, yum-plugin-copr-1.1.31-46.el7_5 +18
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) yum-plugin-aliases-1.1.31-46.el7_5, yum-plugin-changelog-1.1.31-46.el7_5, yum-plugin-ovl-1.1.31-46.el7_5 +4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) yum-NetworkManager-dispatcher-1.1.31-46.el7_5, yum-plugin-auto-update-debug-info-1.1.31-46.el7_5, yum-plugin-copr-1.1.31-46.el7_5 +18
Fixes 1 record
Priority MEDIUM 44
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.05638 · Published 2018-08-01 · Partial fix CWE-59
