Security Advisory
CVE-2018-7685
7.8
HIGH
Vulnerability Description
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.
Published Date
August 31, 2018
Official Source
NIST NVD Advisory