RHSA-2018:2284 — Red Hat Security Advisory: yum-utils security update

Fixed packages 108

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	yum-NetworkManager-dispatcher	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-aliases	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-auto-update-debug-info	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-changelog	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-fastestmirror	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-filter-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-fs-snapshot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-keys	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-list-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-local	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-merge-conf	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-ovl	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-post-transaction-actions	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-priorities	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-protectbase	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-ps	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-remove-with-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-rpm-warm-cache	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-security	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-show-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-tmprepo	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-tsflags	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-upgrade-helper	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-verify	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-plugin-versionlock	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-updateonboot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	yum-utils	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-NetworkManager-dispatcher	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-aliases	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-auto-update-debug-info	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-changelog	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-fastestmirror	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-filter-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-fs-snapshot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-keys	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-list-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-local	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-merge-conf	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-ovl	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-post-transaction-actions	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-priorities	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-protectbase	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-ps	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-remove-with-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-rpm-warm-cache	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-security	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-show-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-tmprepo	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-tsflags	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-upgrade-helper	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-verify	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-plugin-versionlock	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-updateonboot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	yum-utils	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-NetworkManager-dispatcher	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-aliases	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-auto-update-debug-info	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-changelog	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-fastestmirror	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-filter-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-fs-snapshot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-keys	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-list-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-local	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-merge-conf	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-ovl	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-post-transaction-actions	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-priorities	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-protectbase	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-ps	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-remove-with-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-rpm-warm-cache	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-security	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-show-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-tmprepo	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-tsflags	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-upgrade-helper	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-verify	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-plugin-versionlock	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-updateonboot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	yum-utils	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-NetworkManager-dispatcher	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-aliases	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-auto-update-debug-info	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-changelog	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-fastestmirror	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-filter-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-fs-snapshot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-keys	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-list-data	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-local	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-merge-conf	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-ovl	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-post-transaction-actions	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-priorities	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-protectbase	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-ps	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-remove-with-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-rpm-warm-cache	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-security	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-show-leaves	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-tmprepo	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-tsflags	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-upgrade-helper	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-verify	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-plugin-versionlock	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-updateonboot	0:1.1.30-42.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	yum-utils	0:1.1.30-42.el6_10

Vulnerabilities 1

High 8.8

CVE-2018-10897

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remot…

The RPM Project yum-utils:

Aug 1, 2018

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1600221
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2284.json
report
https://access.redhat.com/security/cve/CVE-2018-10897
advisory
https://www.cve.org/CVERecord?id=CVE-2018-10897
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-10897

Red Hat Security Advisory: yum-utils security update

Fixed packages 108

Vulnerabilities 1

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remot…

References