Bug 21470 - swftools new security issue CVE-2017-8401
Summary: swftools new security issue CVE-2017-8401
Status: RESOLVED DUPLICATE of bug 20846
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Matteo Pasotti
QA Contact: Sec team
URL:
Whiteboard: MGA6TOO MGA5TOO
Keywords:
Depends on:
Blocks:
 
Reported: 2017-08-08 08:13 CEST by Rémi Verschelde
Modified: 2017-12-29 05:44 CET (History)
7 users (show)

See Also:
Source RPM: swftools-0.9.2-7.mga5.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Rémi Verschelde 2017-08-08 08:13:34 CEST 
+++ This bug was initially created as a clone of Bug #20846 +++

openSUSE has issued an advisory on May 10:
https://lists.opensuse.org/opensuse-updates/2017-05/msg00034.html

CVE-2017-8400 was fixed in bug 20846 but CVE-2017-8401 is still unfixed upstream: https://github.com/matthiaskramm/swftools/issues/14
Rémi Verschelde 2017-08-08 08:14:14 CEST

Assignee: bugsquad => matteo.pasotti
Keywords: validated_update => (none)
Whiteboard: (none) => MGA6TOO MGA5TOO

Rémi Verschelde 2017-08-08 08:14:26 CEST

Depends on: 20846 => (none)

Comment 1 David Walser 2017-12-29 05:44:52 CET 
We included upstream's attempt to fix this in the previous update.

*** This bug has been marked as a duplicate of bug 20846 ***

Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.