Skip to content
OpenAdvisories
High ELSA-2020-3658 1 CVE

Important: librepo security update (Oracle Linux 8)

Published Sep 9, 2020 · Updated Sep 9, 2020

Ecosystem: Oracle Linux

Summary

[1.11.0-3]
- Validate paths read from repomd.xml (RhBug:1866498)

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 librepo 0:1.11.0-3.el8_2
Oracle Linux · 8 python3-librepo 0:1.11.0-3.el8_2

Vulnerabilities 1

  • Unscored —
    CVE-2020-14352

    A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to…