Bug 24509

Summary: guacd new security issue CVE-2018-1340
Product: Mageia Reporter: David Walser <luigiwalser>
Component: SecurityAssignee: Nicolas Lécureuil <mageia>
Status: RESOLVED FIXED QA Contact: Sec team <security>
Severity: major    
Priority: Normal CC: marja11
Version: 7   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Source RPM: guacd-0.6.0-5.mga7.src.rpm CVE:
Status comment: Fixed upstream in 1.0.0
Bug Depends on: 27593, 28158    
Bug Blocks:    

Description David Walser 2019-03-13 19:49:37 CET 
Fedora has issued an advisory on March 12:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/32RWZPQ7FRP73BVKOQK27XV6TX47TT3R/

The issue is fixed upstream in 1.0.0.

Mageia 6 is also affected.
David Walser 2019-03-13 19:49:42 CET

Whiteboard: (none) => MGA6TOO

Comment 1 Marja Van Waes 2019-03-14 16:10:08 CET 
Assigning to our registered guacd maintainer.

Assignee: bugsquad => mageia
CC: (none) => marja11

David Walser 2019-03-28 21:21:07 CET

Status comment: (none) => Fixed upstream in 1.0.0

David Walser 2019-06-23 19:20:17 CEST

Whiteboard: MGA6TOO => MGA7TOO, MGA6TOO

Nicolas Lécureuil 2020-05-22 14:05:25 CEST

Whiteboard: MGA7TOO, MGA6TOO => MGA7TOO

Comment 2 David Walser 2020-11-11 00:23:39 CET 
This has since been updated to 1.0.0 in Cauldron.

Version: Cauldron => 7
Whiteboard: MGA7TOO => (none)

David Walser 2020-11-11 00:25:06 CET

Depends on: (none) => 27593

Comment 3 Nicolas Lécureuil 2021-02-15 15:50:06 CET 
new guacd available on mga 7 updatestesting.

It has 2 packages:

util-linux and ossp_uuid


They are nedeed because before the 2 were conflicting, now they are like in cauldron coinstallable.

( as guacd needs ossp_uuid ).
Nicolas Lécureuil 2021-02-15 15:50:29 CET

Assignee: mageia => qa-bugs

David Walser 2021-02-15 17:08:03 CET

Assignee: qa-bugs => mageia

Aurelien Oudelet 2021-06-22 22:09:58 CEST

Depends on: (none) => 28158

Comment 4 David Walser 2021-06-23 19:28:01 CEST 
Fixed in:
https://advisories.mageia.org/MGASA-2021-0272.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED