Bug 23159 - ytnef new security issues CVE-2017-12141, CVE-2017-9146, CVE-2017-9471, CVE-2017-9473
Summary: ytnef new security issues CVE-2017-12141, CVE-2017-9146, CVE-2017-9471, CVE-2...
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Bruno Cornec
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-06-08 22:35 CEST by David Walser
Modified: 2019-12-19 21:34 CET (History)
0 users

See Also:
Source RPM: ytnef-1.9.2-1.mga6.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2018-06-08 22:35:26 CEST 
Ubuntu has issued an advisory on May 31:
https://usn.ubuntu.com/3667-1/
Comment 1 Bruno Cornec 2018-10-11 00:30:43 CEST 
pushed 1.9.3 which solves that issue in cauldron

Assignee: bruno => qa-bugs
Status: NEW => ASSIGNED

Comment 2 David Walser 2018-10-11 00:37:06 CEST 
Fixed in ytnef-1.9.3-1.mga7.

Resolution: (none) => FIXED
Assignee: qa-bugs => bruno
Status: ASSIGNED => RESOLVED

Comment 3 David Walser 2019-12-19 21:34:51 CET 
This also fixed CVE-2017-12142 and CVE-2017-12144:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
Note You need to log in before you can comment on or make changes to this bug.