Bug 25932

Summary:	filezilla/libfilezilla security update
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	andrewsfarm, geiger.david68210, mageia, sysadmin-bugs, tmb
Version:	7	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA7-64-OK
Source RPM:	filezilla-3.42.1-1.mga7.src.rpm, libfilezilla-0.16.0-1.mga7.src.rpm	CVE:
Status comment:
Bug Depends on:	25760
Bug Blocks:

Description David Walser 2019-12-23 19:08:25 CET

Fedora has issued advisories on July 6:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DYM7BZFULYL5BCP2SHUMLBOW2W6CDWPX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LPQ3OUS2C3NIXCARPY7ELMMGKDQZXFUH/

They update to newer versions of filezilla/libfilezilla than we have, fixing a security issue.  More recently, upstream released on December 20 libfilezilla 0.19.3 and filezilla 3.46.1, updating the bundled PuTTY (also fixing security issues), and today (December 23) filezilla 3.46.3, fixing more bugs:
https://filezilla-project.org/

Comment 1 David Walser 2019-12-24 00:37:03 CET

Packages uploaded by David Geiger:
libfilezilla3-0.19.3-1.mga7
libfilezilla-devel-0.19.3-1.mga7
libfilezilla-i18n-0.19.3-1.mga7
filezilla-3.46.3-1.mga7

from SRPMS:
libfilezilla-0.19.3-1.mga7.src.rpm
filezilla-3.46.3-1.mga7.src.rpm

Advisory to come later.

Assignee: geiger.david68210 => qa-bugs
CC: (none) => geiger.david68210

Comment 2 PC LX 2019-12-24 12:59:18 CET

Installed and tested without issues.


Tested on various (S)FTP servers and sites. All worked.


System: Mageia 7, x86_64, Plasma DE, LXQt DE, Intel CPU, nVidia GPU using nvidia340 proprietary  driver.


$ uname -a
Linux marte 5.4.6-desktop-1.mga7 #1 SMP Sun Dec 22 09:44:20 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -qa | grep filezilla
filezilla-3.46.3-1.mga7
libfilezilla-i18n-0.19.3-1.mga7
lib64filezilla3-0.19.3-1.mga7

Whiteboard: (none) => MGA7-64-OK
CC: (none) => mageia

Comment 3 Thomas Andrews 2019-12-26 22:36:45 CET

Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

David Walser 2019-12-27 02:34:51 CET

Depends on: (none) => 25760

Thomas Backlund 2019-12-31 16:49:24 CET

Keywords: (none) => advisory
CC: (none) => tmb

Comment 4 Mageia Robot 2019-12-31 17:52:41 CET

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2019-0417.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED