Bug 25947

Summary: kmplayer new security issue CVE-2019-9133
Product: Mageia Reporter: David Walser <luigiwalser>
Component: SecurityAssignee: Mageia Bug Squad <bugsquad>
Status: RESOLVED INVALID QA Contact: Sec team <security>
Severity: major    
Priority: Normal CC: geiger.david68210
Version: Cauldron   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA7TOO
Source RPM: kmplayer-0.12.0b-6.mga7.src.rpm CVE:
Status comment:

Description David Walser 2019-12-23 23:58:03 CET
Fedora has issued an advisory on September 17:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VT5HBIKH64YRZFFAPXGOTHIQJHSTQJF7/

Mageia 7 is also affected.
David Walser 2019-12-23 23:58:14 CET

Whiteboard: (none) => MGA7TOO

Comment 1 David GEIGER 2019-12-24 06:59:25 CET
Seems fedora fixes it updating to latest 0.12.0b that we already have in our repo!

CC: (none) => geiger.david68210

Comment 2 David Walser 2019-12-24 07:02:08 CET
Indeed!

Status: NEW => RESOLVED
Resolution: (none) => INVALID