| Summary: | clementine new security issue CVE-2018-14332 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | major | ||
| Priority: | Normal | CC: | andrewsfarm, geiger.david68210, herman.viaene, joselp, sysadmin-bugs |
| Version: | 7 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA7-64-OK | ||
| Source RPM: | clementine-1.3.1-10.git20190423.1.mga7.src.rpm | CVE: | |
| Status comment: | |||
|
Description
David Walser
2019-11-26 16:40:41 CET
Done for mga7! Advisory: ======================== Updated clementine package fixes security vulnerability: NULL ptr dereference (crash) in the moodbar pipeline (CVE-2018-14332). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14332 https://lists.opensuse.org/opensuse-updates/2019-07/msg00103.html ======================== Updated packages in core/updates_testing: ======================== clementine-1.3.1-10.git20191016.1.mga7 from clementine-1.3.1-10.git20191016.1.mga7.src.rpm Assignee:
geiger.david68210 =>
qa-bugs MGA7-64 Plasma on Lenovo B50 No installation issues. Opening clementine the first time on this setup: $ clementine 10:05:44.170 INFO main:319 Clementine-qt5 1.3.1 10:05:44.351 INFO Database:299 Creating initial database schema 10:05:44.351 DEBUG Database:465 Applying database schema update 0 from ":/schema/schema.sql" 10:05:44.438 DEBUG Database:465 Applying database schema update 1 from ":/schema/schema-1.sql" more of those, then 10:05:47.089 INFO Database:545 Updating "magnatune_songs" for %allsongstables 10:05:47.090 INFO Database:545 Updating "spotify_search_songs" for %allsongstables 10:05:47.091 INFO Database:545 Updating "jamendo.songs" for %allsongstables 10:05:47.092 INFO Database:545 Updating "playlist_items" for %allsongstables and further10:05:50.493 DEBUG InternetModel:133 Adding internet service: "DigitallyImported" 10:05:50.569 DEBUG InternetModel:133 Adding internet service: "Icecast" 10:05:50.581 DEBUG InternetModel:133 Adding internet service: "Jamendo" 10:05:50.582 INFO Player:639 Registered URL handler for "jazzradio" 10:05:50.582 DEBUG InternetModel:133 Adding internet service: "JazzRadio" 10:05:50.588 INFO Player:639 Registered URL handler for "magnatune" 10:05:50.590 DEBUG InternetModel:133 Adding internet service: "Magnatune" Selected a local wav file: plays OK Selected one of the internet radios: plays OK Good to go. Whiteboard:
(none) =>
MGA7-64-OK I've installed in Mageia 7 Plasma Virtualbox x64. Works fine, play, browse for folders, add reproduction list. Without problems. Greetings!! CC:
(none) =>
joselp Thank you, Gentlemen. Validating. Advisory in Comment 2. Keywords:
(none) =>
validated_update An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2019-0380.html Resolution:
(none) =>
FIXED |