Bug 14986

Summary:	mpfr new security issue CVE-2014-9474
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	herman.viaene, sysadmin-bugs
Version:	4	Keywords:	validated_update
Target Milestone:	---
Hardware:	i586
OS:	Linux
URL:	http://lwn.net/Vulnerabilities/628832/
Whiteboard:	has_procedure advisory MGA4-64-OK MGA4-32-OK
Source RPM:	mpfr-3.1.2-2.mga4.src.rpm	CVE:
Status comment:

Description David Walser 2015-01-08 18:06:58 CET

Fedora has issued an advisory on December 15:
https://lists.fedoraproject.org/pipermail/package-announce/2015-January/147737.html

Patched packages uploaded for Mageia 4 and Cauldron.

Advisory:
========================

Updated mpfr packages fix security vulnerability:

A buffer overflow was reported in mpfr. This is due to incorrect GMP
documentation for mpn_set_str about the size of a buffer (CVE-2014-9474).

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9474
https://lists.fedoraproject.org/pipermail/package-announce/2015-January/147737.html
========================

Updated packages in core/updates_testing:
========================
libmpfr4-3.1.2-2.1.mga4
libmpfr-devel-3.1.2-2.1.mga4
libmpfr-static-devel-3.1.2-2.1.mga4

from mpfr-3.1.2-2.1.mga4.src.rpm

Reproducible: 

Steps to Reproduce:

Comment 1 Herman Viaene 2015-01-09 11:32:07 CET

MGA4-64 on HP Probook 6555b KDE
No installation issues.
urpmq --whatrequires lib64mpfr4
shows a.o. genius
I installed genius, and ran it with strace
gave it 30*70+67^3.0 to calculate , returned = 302863.0
trace shows : open("/lib64/libmpfr.so.4"

CC: (none) => herman.viaene
Whiteboard: (none) => MGA4-64-OK

Comment 2 Herman Viaene 2015-01-09 11:43:20 CET

MGA4-32 on AcerD620 Xfce
Confirm results as per Comment 1

Whiteboard: MGA4-64-OK => MGA4-64-OK MGA4-32-OK

Comment 3 claire robinson 2015-01-09 16:19:11 CET

Genius, well done Herman.

Validating. Advisory uploaded.

Please push to 4 updates

Thanks

Keywords: (none) => validated_update
Whiteboard: MGA4-64-OK MGA4-32-OK => has_procedure advisory MGA4-64-OK MGA4-32-OK
CC: (none) => sysadmin-bugs

Comment 4 Mageia Robot 2015-01-09 17:44:54 CET

An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGASA-2015-0021.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED