Bug 24509 - guacd new security issue CVE-2018-1340
Summary: guacd new security issue CVE-2018-1340
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Nicolas Lécureuil
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on: 27593 28158
Blocks:
  Show dependency tree / graph
 
Reported: 2019-03-13 19:49 CET by David Walser
Modified: 2021-06-23 19:28 CEST (History)
1 user (show)

See Also:
Source RPM: guacd-0.6.0-5.mga7.src.rpm
CVE:
Status comment: Fixed upstream in 1.0.0

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-03-13 19:49:37 CET 
Fedora has issued an advisory on March 12:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/32RWZPQ7FRP73BVKOQK27XV6TX47TT3R/

The issue is fixed upstream in 1.0.0.

Mageia 6 is also affected.
David Walser 2019-03-13 19:49:42 CET

Whiteboard: (none) => MGA6TOO

Comment 1 Marja Van Waes 2019-03-14 16:10:08 CET 
Assigning to our registered guacd maintainer.

Assignee: bugsquad => mageia
CC: (none) => marja11

David Walser 2019-03-28 21:21:07 CET

Status comment: (none) => Fixed upstream in 1.0.0

David Walser 2019-06-23 19:20:17 CEST

Whiteboard: MGA6TOO => MGA7TOO, MGA6TOO

Nicolas Lécureuil 2020-05-22 14:05:25 CEST

Whiteboard: MGA7TOO, MGA6TOO => MGA7TOO

Comment 2 David Walser 2020-11-11 00:23:39 CET 
This has since been updated to 1.0.0 in Cauldron.

Version: Cauldron => 7
Whiteboard: MGA7TOO => (none)

David Walser 2020-11-11 00:25:06 CET

Depends on: (none) => 27593

Comment 3 Nicolas Lécureuil 2021-02-15 15:50:06 CET 
new guacd available on mga 7 updatestesting.

It has 2 packages:

util-linux and ossp_uuid


They are nedeed because before the 2 were conflicting, now they are like in cauldron coinstallable.

( as guacd needs ossp_uuid ).
Nicolas Lécureuil 2021-02-15 15:50:29 CET

Assignee: mageia => qa-bugs

David Walser 2021-02-15 17:08:03 CET

Assignee: qa-bugs => mageia

Aurelien Oudelet 2021-06-22 22:09:58 CEST

Depends on: (none) => 28158

Comment 4 David Walser 2021-06-23 19:28:01 CEST 
Fixed in:
https://advisories.mageia.org/MGASA-2021-0272.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.