Unrated
In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malici...
CVE-2017-7435
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2017-7435 libzypp Fixed in: 17.3.1-1
Original description The description as published by the source.
References
- report bugzilla.suse.com
- web lists.opensuse.org
- web suse.com