#850 fix access check in host.distRepoMove

Created 5 months ago by mikem
Modified 3 months ago

The host.distRepoMove hub call does not perform the correct access checks. This bug allows an attacker to manipulate the filesystem, potentially destroying data or exposing secrets.

This issue has been assigned CVE-2018-1002150

You can read the full announcement here:
https://docs.pagure.org/koji/CVE-2018-1002150/

Commit ab1ade7 fixes this issue

4 months ago

Metadata Update from @mikem:
- Issue private status set to: False (was: True)

3 months ago

Metadata Update from @tkopecek:
- Issue set to the milestone: 1.16

Login to comment on this ticket.