Skip to content
OpenAdvisories
Medium ELSA-2020-5012 1 CVE

Moderate: librepo security update (Oracle Linux 7)

Published Nov 12, 2020 · Updated Nov 12, 2020

Ecosystem: Oracle Linux

Summary

[1.8.1-8]
- Validate paths read from repomd.xml (RhBug: 1866500)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 librepo 0:1.8.1-8.el7_9
Oracle Linux · 7 librepo-devel 0:1.8.1-8.el7_9
Oracle Linux · 7 python-librepo 0:1.8.1-8.el7_9

Vulnerabilities 1

  • Unscored —
    CVE-2020-14352

    A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to…