Red Hat Security AdvisoryRHSA-2018:2626
Red Hat Virtualization security, bug fix, and enhancement update
Released 2018-09-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) imgbased-1.0.24-1.el7ev, python-imgbased-1.0.24-1.el7ev, redhat-release-virtualization-host-4.2-6.0.el7 +1
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.2-20180828.2.el7_5, redhat-virtualization-host-image-update-4.2-20180828.2.el7_5
Fixes 1 record
Priority MEDIUM 44
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.05638 · Published 2018-08-01 · Partial fix CWE-59