Bug 20402

Summary:	ktnef new security issue fixed in KDE Applications 16.12.3
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	KDE maintainers <kde>
Status:	RESOLVED OLD	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	5
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	kdepim4-4.14.5-1.mga5.src.rpm	CVE:
Status comment:

Description David Walser 2017-03-06 02:15:04 CET

KDE has issued an advisory on February 27:
https://www.kde.org/info/security/advisory-20170227-1.txt

The issue will be fixed in KDE Applications 16.12.3, but Mageia 5 is also affected.

Comment 1 David Walser 2017-12-27 04:52:14 CET

It looks like KTNEFMain::extractTo() in kdepim-4.14.10/ktnef/ktnefmain.cpp *might* be affected, but the code is quite different.  We won't be able to backport a fix for this for Mageia 5.

Resolution: (none) => OLD
Status: NEW => RESOLVED