Skip to content
OpenAdvisories
Unscored RHSA-2020:5012 1 CVE

Red Hat Security Advisory: librepo security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client librepo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client librepo-debuginfo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client librepo-devel 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client python-librepo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode librepo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode librepo-debuginfo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode librepo-devel 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode python-librepo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server librepo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server librepo-debuginfo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server librepo-devel 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server python-librepo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation librepo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation librepo-debuginfo 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation librepo-devel 0:1.8.1-8.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation python-librepo 0:1.8.1-8.el7_9

Vulnerabilities 1

  • Unscored —
    CVE-2020-14352

    A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1866498
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5012.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-14352
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14352
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14352