Security Vulnerability in Artifactory: CVE-2020-11023

[varadajadhav]

Hello Team,

We have identified a security vulnerability in our Artifactory installation for CVE-2020-11023. During our investigation, the affected vulnerable packages are - libgcc, libstdc++-devel and libstdc++

Our current Artifactory version is 7.98.8. Could you confirm if this is vulnerable in this version? If so, could you provide guidance on how to address this issue?

Please let me know if you need any additional details from my side.

Thank you!

[vijayreddy1991]

Hi @varadajadhav
The issue has been resolved in the latest release of Artifactory version 7.98.x. Please upgrade to latest version

[varadajadhav]

Can you please share the link of the doc where it's mentioned which 7.98.x version we need to use

[amithins]

Apologies, the fix was implemented internally. It was overlooked in the previous message. It will be included in the upcoming patch for version 7.104.

[varadajadhav]

When do we expect the patch to be released?