Bug 27624

Summary:	libapreq2 new security issue CVE-2019-12412
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	All Packagers <pkg-bugs>
Status:	RESOLVED DUPLICATE	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	nicolas.salguero
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA7TOO
Source RPM:	libapreq2-2.130.0-31.mga8.src.rpm	CVE:
Status comment:

Description David Walser 2020-11-17 20:07:21 CET

A security issue in libapreq2 has been announced today (November 17):
https://www.openwall.com/lists/oss-security/2020/11/17/5

Mageia 7 is also affected.

David Walser 2020-11-17 20:07:27 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Lewis Smith 2020-11-18 08:55:02 CET

No evident maintainer for this, so assigning it globally.

Assignee: bugsquad => pkg-bugs

Comment 2 Nicolas Salguero 2020-11-19 09:37:46 CET

Hi,

That CVE was already fixed in bug 25638.

Best regards,

Nico.

*** This bug has been marked as a duplicate of bug 25638 ***

Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED
CC: (none) => nicolas.salguero