Ubuntu has issued an advisory today (January 25): https://usn.ubuntu.com/usn/usn-3547-1/ CVE-2018-6003 does not affect Mageia 5, but does affect Mageia 6. CVE-2017-10790 also affects Mageia 5 and Mageia 6.
Whiteboard: (none) => MGA6TOO
CVE-2018-6003 was fixed in 4.13. Fedora has issued an advisory for this on January 23: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SV667U5M7I5UJQFCA7UOSEE4AKKYRA64/
Assigning to all packagers collectively, since there is no registered maintainer for this package.
CC: (none) => marja11Assignee: bugsquad => pkg-bugs
Blocks: (none) => 22484
Updated packages uploaded for Mageia 6 and Cauldron. Advisory: ======================== Updated libtasn1 packages fix security vulnerabilities: It was discovered that Libtasn1 incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could possibly use this to cause a denial of service (CVE-2017-10790). It was discovered that Libtasn1 incorrectly handled certain inputs. An attacker could possibly use this to cause Libtasn1 to hang, resulting in a denial of service (CVE-2018-6003). References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10790 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6003 https://usn.ubuntu.com/usn/usn-3547-1/ ======================== Updated packages in core/updates_testing: ======================== libtasn1_6-4.13-1.mga6 libtasn1-tools-4.13-1.mga6 libtasn1-devel-4.13-1.mga6 from libtasn1-4.13-1.mga6.src.rpm
Assignee: pkg-bugs => qa-bugsVersion: Cauldron => 6Whiteboard: MGA6TOO => (none)
Created attachment 9959 [details] assign.asn1
CC: (none) => herman.viaene
Created attachment 9960 [details] pkix.asn
MGA6-64 on Lenovo B50 Plasma No installation issues Rerun test as per bug 20931 Comment 6: same results: OK Added test files in attachment, so next time I don't have to follow the whole thread again.
Whiteboard: (none) => MGA6-64-OK
Advisory committed to svn. Validating the update.
Keywords: (none) => advisory, validated_updateCC: (none) => davidwhodgins, sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2018-0121.html
Resolution: (none) => FIXEDStatus: NEW => RESOLVED