Oval Definition:oval:org.opensuse.security:def:96355
Revision Date:2020-09-14Version:1
Title:Security update for librepo (Important)
Description:

This update for librepo fixes the following issues:

- Fixed path validation to prevent directory traversal attacks (bsc#1175475, CVE-2020-14352)

This update was imported from the SUSE:SLE-15-SP2:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.
Family:unixClass:patch
Status:Reference(s):1175475
CVE-2020-14352
openSUSE-SU-2020:1428-1
Platform(s):SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
SUSE Package Hub for SUSE Linux Enterprise 15 SP2
Product(s):
Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed
  • AND Package Information
  • librepo-devel-1.11.2-bp152.2.3.1 is installed
  • OR librepo0-1.11.2-bp152.2.3.1 is installed
  • OR python3-librepo-1.11.2-bp152.2.3.1 is installed
    • BACK