CVE:CVE-2018-10897
CNNVD:CNNVD-201808-020
Yum是美国杜克大学（Duke University）团队开发的一款基于RPM包管理的Shell字符前端软件包管理器，它支持从指定的服务器自动下载RPM包并且安装，以及处理依赖性关系。
yum-utils 1.1.31版本及之前版本中存在后置链接漏洞，该漏洞源于无法清理远程存储库配置文件中的路径。攻击者可利用该漏洞将文件复制到目标目录之外的目录下或覆盖重要的系统文件。
solution:Upgrade rpm yum-utils to a higher version than 1.1.31,and avoid the version (,1.1.31]; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0