Beveiligingsadvies

CVE-2017-9269

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-03-01 19:00:00
Laatst bijgewerkt 2024-09-17 00:36:56
Toegewezen door microfocus
CVSS-score 7.7
Status PUBLISHED

Beschrijving

In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content.