Bug 27624 - libapreq2 new security issue CVE-2019-12412
Summary: libapreq2 new security issue CVE-2019-12412
Status: RESOLVED DUPLICATE of bug 25638
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: All Packagers
QA Contact: Sec team
URL:
Whiteboard: MGA7TOO
Keywords:
Depends on:
Blocks:
 
Reported: 2020-11-17 20:07 CET by David Walser
Modified: 2020-11-19 09:37 CET (History)
1 user (show)

See Also:
Source RPM: libapreq2-2.130.0-31.mga8.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2020-11-17 20:07:21 CET 
A security issue in libapreq2 has been announced today (November 17):
https://www.openwall.com/lists/oss-security/2020/11/17/5

Mageia 7 is also affected.
David Walser 2020-11-17 20:07:27 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Lewis Smith 2020-11-18 08:55:02 CET 
No evident maintainer for this, so assigning it globally.

Assignee: bugsquad => pkg-bugs

Comment 2 Nicolas Salguero 2020-11-19 09:37:46 CET 
Hi,

That CVE was already fixed in bug 25638.

Best regards,

Nico.

*** This bug has been marked as a duplicate of bug 25638 ***

Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED
CC: (none) => nicolas.salguero
Note You need to log in before you can comment on or make changes to this bug.