Red Hat Security AdvisoryRHSA-2020:3944
unoconv security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) unoconv-0.6-8.el7
- Red Hat Enterprise Linux Server Optional (v. 7) unoconv-0.6-8.el7
- Red Hat Enterprise Linux Workstation (v. 7) unoconv-0.6-8.el7
Fixes 1 record
Priority LOW 37
The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02158 · Published 2019-10-21 · Fixed in 0.9.0 CWE-918
