[SECURITY] Fedora 29 Update: coreutils-8.30-5.fc29

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...

EulerOS Virtualization 2.5.1 : yum-utils (EulerOS-SA-2018-1327)

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security ha...

Ubuntu: Security Advisory (USN-3650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.0 : yum-utils (EulerOS-SA-2018-1349)

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security ha...

openSUSE: Security Advisory for xdg-utils (openSUSE-SU-2018:1596-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: yum-utils-1.1.31-517.fc29

yum-utils is a collection of utilities and examples for the yum package manager. It includes utilities by different authors that make yum easier and more powerful to use. These tools include: debuginfo-install, find-repos-of-install, needs-restarting, package-cleanup, repoclosure, repodiff,...

Fedora Update for yum-utils FEDORA-2018-3aafb854a9

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for yum-utils FEDORA-2018-4f0089c995

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: yum-utils-1.1.31-514.fc27

yum-utils is a collection of utilities and examples for the yum package manager. It includes utilities by different authors that make yum easier and more powerful to use. These tools include: debuginfo-install, find-repos-of-install, needs-restarting, package-cleanup, repoclosure, repodiff,...

ViaBTC Exchange Server Integer Overflow Vulnerability (CNVD-2018-20071)

ViaBTC Exchange Server is a dedicated backend engine for cryptocurrency trading. An integer overflow vulnerability exists in the utils/utwssvr.c file in versions of ViaBTC Exchange Server prior to 2018-08-21. An attacker could exploit this vulnerability to cause memory corruption...

EulerOS 2.0 SP3 : yum-utils (EulerOS-SA-2018-1320)

According to the version of the yum-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security has extracted th...

EulerOS 2.0 SP2 : yum-utils (EulerOS-SA-2018-1319)

According to the version of the yum-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security has extracted th...

Security Bulletin: A vulnerability in yum-utils affects PowerKVM

Summary PowerKVM is affected by a vulnerability in yum-utils. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10897 DESCRIPTION: reposync could allow a remote attacker to traverse directories on the system, caused by the improper sanitation of paths in remote...

CVE-2018-17570: Integer Overflow or Wraparound

utils/utwssvr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

CVE-2018-17568: Integer Overflow or Wraparound

utils/utrpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

Important: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Remote Code Execution

Overview react-dev-utils on Windows is vulnerable to remote code execution. Recommendation Update to one of the follow versions, depending on the release line that you are using. - 1.0.4 - 2.0.2 - 3.1.2 - 4.2.2 - 5.0.2 - 6.0.0-next.a671462c References -...

Amazon Linux 2 : yum-utils (ALAS-2018-1063)

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path...

Important: yum-utils

Issue Overview: A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system...

CentOS 6 : yum-utils (CESA-2018:2284)

An update for yum-utils is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...