Bug 22816

Summary:	plexus-utils new security issue CVE-2017-1000487
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED OLD	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	5
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	plexus-utils-3.0.14-5.mga5.src.src.rpm	CVE:
Status comment:

Description David Walser 2018-03-21 20:41:03 CET

Debian has issued an advisory on March 20:
https://www.debian.org/security/2018/dsa-4146

The issue was fixed upstream in 3.0.16.

Comment 1 David Walser 2018-03-21 20:41:14 CET

We won't be fixing this, but I filed it so we would have a record of it.

Status: NEW => RESOLVED
Resolution: (none) => OLD

Comment 2 David Walser 2018-03-31 21:23:53 CEST

Debian has issued an advisory for this for 3.0.x on March 22:
https://www.debian.org/security/2018/dsa-4149