Bug 18872

Summary:	struts new security issues CVE-2016-1181 and CVE-2016-1182
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Nicolas Lécureuil <mageia>
Status:	RESOLVED DUPLICATE	QA Contact:	Sec team <security>
Severity:	critical
Priority:	Normal	CC:	geiger.david68210
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	http://lwn.net/Vulnerabilities/693179/
Whiteboard:	MGA5TOO
Source RPM:	struts-1.3.10-18.mga6.src.rpm	CVE:
Status comment:

Description David Walser 2016-07-05 20:21:21 CEST

Fedora has issued an advisory on June 30:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UQI2PYM3R4FWEOVHIFT7KUPTILG2DFMZ/

They added this patch to fix the issues:
http://pkgs.fedoraproject.org/cgit/rpms/struts.git/tree/struts-1.3.10-CVE-2016-1181-CVE-2016-1182.patch?id=b87aa7b6738e72bed685560b726f7c3874ae553f

Mageia 5 is also affected.

David Walser 2016-07-05 20:21:31 CEST

CC: (none) => geiger.david68210
Whiteboard: (none) => MGA5TOO

Comment 1 David GEIGER 2016-07-05 21:13:23 CEST

Already reported https://bugs.mageia.org/show_bug.cgi?id=18763

Comment 2 David Walser 2016-07-05 21:20:03 CEST

Whoops, thanks David.

*** This bug has been marked as a duplicate of bug 18763 ***

Status: NEW => RESOLVED
Resolution: (none) => DUPLICATE