Bug 28803

Summary:	apache-commons-io new security issue CVE-2021-29425
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Java Stack Maintainers <java>
Status:	RESOLVED OLD	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	7
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	apache-commons-io-2.6-3.mga7.src.rpm	CVE:
Status comment:

Description David Walser 2021-04-18 22:42:08 CEST

Apache has issued an advisory on April 12:
https://www.openwall.com/lists/oss-security/2021/04/12/1

The issue is fixed upstream in 2.7.

Comment 1 David Walser 2021-05-30 22:40:56 CEST

openSUSE has issued an advisory for this on April 23:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UIQCDUGRMCM4KVIIQEW45HTWGY6U3D2F/

Comment 2 David Walser 2021-07-01 18:31:08 CEST

https://blog.mageia.org/en/2021/06/08/mageia-7-will-reach-end-of-support-on-30th-of-june-the-king-is-dead-long-live-the-king/

Resolution: (none) => OLD
Status: NEW => RESOLVED