Bug#894832: CVE-2018-1002150

2018-04-08 Thread Salvatore Bonaccorso 
Control: forwarded -1 https://pagure.io/koji/issue/850

Hi

There is some further information on that issue in the upstrema bug at
https://pagure.io/koji/issue/850 and the
https://docs.pagure.org/koji/CVE-2018-1002150/ . Versions prior to
1.12.0 are not vulnerable because they do not have the dist-repo
feature.

Regards,
Salvatore

Bug#894832: CVE-2018-1002150

2018-04-04 Thread Moritz Muehlenhoff 
Source: koji
Severity: grave
Tags: security

http://www.openwall.com/lists/oss-security/2018/04/04/1

Cheers,
Moritz