Bug 23723

Summary:	guava new security issue CVE-2018-10237
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Java Stack Maintainers <java>
Status:	RESOLVED OLD	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	mhrambo3501
Version:	6
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	guava-20.0-1.mga7.src.rpm	CVE:
Status comment:

Description David Walser 2018-10-17 23:39:56 CEST

RedHat Satellite 6.4 fixed a security issue in guava:
https://access.redhat.com/errata/RHSA-2018:2927
https://bugzilla.redhat.com/show_bug.cgi?id=1573391

It was fixed upstream in 24.1.1.

Mageia 6 is also affected.

David Walser 2018-10-17 23:40:08 CEST

Whiteboard: (none) => MGA6TOO

Comment 1 David Walser 2019-01-01 04:34:54 CET

guava-25.0-2.mga7 uploaded for Cauldron by Nicolas.

Version: Cauldron => 6
Whiteboard: MGA6TOO => (none)

Comment 2 Mike Rambo 2019-11-06 13:43:38 CET

Mageia 6 is EOL.

CC: (none) => mrambo
Status: NEW => RESOLVED
Resolution: (none) => OLD