Upstream has issued an advisory today (August 27): http://openwall.com/lists/oss-security/2017/08/27/1 Patches are included in the message above, as are tips on backporting them to older versions. Mageia 5 and Mageia 6 are also affected.
Whiteboard: (none) => MGA6TOO, MGA5TOO
Fedora has issued advisories for this on September 17: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WUJXZ4XJWAFRNHBRBSX3GHY4VKXCJUQ7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/Y2V6NPR2KZKFONPHWPGYGEU4FLVNXCZZ/
CC: (none) => lists.jjorge
As this is a simulation that is played online, I'd like to push the 2017.3.1 version as fix. Ok?
Assignee: rverschelde => lists.jjorge
Fine with me. Thanks.
I have push updates for MGA5 and MGA6. Suggested advisory : In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree. Mageia provides 2017.3.1 version as a security and bugfix update, allowing to connect to latest multiplayer servers.
Status: NEW => ASSIGNEDAssignee: lists.jjorge => qa-bugs
Removed Cauldron as the update is done.
Whiteboard: MGA6TOO, MGA5TOO => MGA5TOOVersion: Cauldron => 6
Tested by myself in a MGA6 64. My usual LFDH airport is Ok, with an Alphajet.
Whiteboard: MGA5TOO => MGA5TOO MGA6-64-OK
Tested in a MGA5 64 also. Flight with CESSNA in Prague with multiplayer activated, no problem. How to test : install the 3 RPMS flightgear flightgear-data and simgear. RPMS: flightgear-2017.3.1-1.mgaX.x86_64.rpm flightgear-data-2017.3.1-1.mgaX.noarch.rpm simgear-devel-2017.3.1-1.mgaX.x86_64.rpm simgear-2017.3.1-1.mgaX.x86_64.rpm SRPMS: flightgear-2017.3.1-1.mgaX.srpm flightgear-data-2017.3.1-1.srpm simgear-2017.3.1-1.mgaX.srpm
Whiteboard: MGA5TOO MGA6-64-OK => MGA5TOO MGA6-64-OK MGA5-64-OK
Argh!....you guys got to this addictive game before I did. I see no reason to test this in the 32-bit mode. I suggest pushing it along. Thanks
CC: (none) => wilcal.int
Installed and tested without issues. Installed the following packages: lib64fame0.9_1-0.9.1-17.mga5.x86_64 lib64xdg-basedir1-1.2.0-4.mga5.x86_64 xine1.2-common-1.2.6-5.mga5.tainted.x86_64 lib64xine2-1.2.6-5.mga5.tainted.x86_64 lib64openthreads20-3.2.1-3.mga5.x86_64 lib64openscenegraph100-3.2.1-3.mga5.x86_64 lib64plib1-1.8.5-10.mga5.x86_64 lib64flite1-1.4-7.mga5.x86_64 flightgear-data-2017.3.1-1.mga5.noarch simgear-2017.3.1-1.mga5.x86_64 flightgear-2017.3.1-1.mga5.x86_64 Tested by a short flight and then it crashed (the plain, not the program). The 3D graphics, the audio, all seems OK. System: Mageia 5, X86_64, Intel CPU, nVidia GPU using proprietary driver nvidia340.
CC: (none) => mageia
Advisory made from bug title, comments 0, 1, 4, 7. Validating also.
Keywords: (none) => advisory, validated_updateCC: (none) => lewyssmith, sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2017-0362.html
Status: ASSIGNED => RESOLVEDResolution: (none) => FIXED