Bug 13525

Summary: apt new security issue CVE-2014-0478
Product: Mageia Reporter: David Walser <luigiwalser>
Component: SecurityAssignee: Christiaan Welvaart <cjw>
Status: RESOLVED INVALID QA Contact: Sec team <security>
Severity: normal    
Priority: Normal    
Version: Cauldron   
Target Milestone: ---   
Hardware: i586   
OS: Linux   
URL: http://lwn.net/Vulnerabilities/602328/
Whiteboard: MGA4TOO, MGA3TOO
Source RPM: apt-0.5.15lorg3.94-11.mga4.src.rpm CVE:
Status comment:

Description David Walser 2014-06-13 17:26:40 CEST 
Debian has issued an advisory on June 12:
https://www.debian.org/security/2014/dsa-2958

It's not totally clear if our old version is affected, but if it is, we have the same version in Mageia 3 and Mageia 4.

Reproducible: 

Steps to Reproduce:
David Walser 2014-06-13 17:26:49 CEST

Whiteboard: (none) => MGA4TOO, MGA3TOO

Comment 1 Christiaan Welvaart 2014-06-15 13:57:07 CEST 
Thanks. The reported issue is in "apt-get source" which may not even work with mageia, we certainly don't support it.

Status: NEW => RESOLVED
Resolution: (none) => INVALID