[Bug 1175475] VUL-0: CVE-2020-14352: librepo: missing path validation in repomd.xml may lead to directory traversal

http://bugzilla.opensuse.org/show_bug.cgi?id=1175475 http://bugzilla.opensuse.org/show_bug.cgi?id=1175475#c2 --- Comment #2 from Neal Gompa --- Upstream commit that fixes this: https://github.com/rpm-software-management/librepo/commit/7daea2a2429a54dad6... -- You are receiving this mail because: You are on the CC list for the bug.