Bug 27850 - audacity new security issue CVE-2020-11867
Summary: audacity new security issue CVE-2020-11867
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2020-12-16 15:41 CET by David Walser
Modified: 2021-01-02 22:53 CET (History)
6 users (show)

See Also:
Source RPM: audacity-2.3.1-1.1.mga7.src.rpm
CVE: CVE-2020-11867
Status comment:


Attachments

Description David Walser 2020-12-16 15:41:39 CET
openSUSE has issued an advisory on December 15:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MIO5YFJW5KODA2NDQAAMKAOM57Z2ZM4W/

It's not clear if it's fixed upstream or if so, in which version.

Mageia 7 is affected.
David Walser 2020-12-16 15:41:58 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Lewis Smith 2020-12-17 10:25:45 CET
Audacity has no fixed maintainer, so assigning this globally.
CC'ing ghibo who did lots to it not so long ago.

CC: (none) => ghibomgx
Assignee: bugsquad => pkg-bugs

Comment 2 David GEIGER 2020-12-18 10:30:53 CET
Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.

CC: (none) => geiger.david68210

Comment 3 David GEIGER 2020-12-18 10:43:25 CET
But here https://github.com/audacity/audacity/pull/700 there is a PR to fix this issue but not yet merged upstream.
Comment 4 Nicolas Lécureuil 2020-12-24 12:35:59 CET
patch added in mageia 7

CC: (none) => mageia

Comment 5 Nicolas Lécureuil 2020-12-24 12:39:35 CET
src:
audacity-2.3.1-1.2.mga7

Version: Cauldron => 7
Whiteboard: MGA7TOO => (none)

Nicolas Lécureuil 2020-12-24 12:39:53 CET

Assignee: pkg-bugs => qa-bugs

Comment 6 David Walser 2020-12-24 16:21:34 CET
Advisory:
========================

Updated audacity package fixes security vulnerability:

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by
default. After Audacity creates the temporary directory, it sets its
permissions to 755. Any user on the system can read and play the temporary
audio .au files located there (CVE-2020-11867).

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11867
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MIO5YFJW5KODA2NDQAAMKAOM57Z2ZM4W/
========================

Updated packages in core/updates_testing:
========================
audacity-2.3.1-1.2.mga7

from audacity-2.3.1-1.2.mga7.src.rpm
Comment 7 Brian Rockwell 2020-12-29 23:40:27 CET
The following 13 packages are going to be installed:

- audacity-2.3.1-1.2.mga7.x86_64
- lib64flac++6-1.3.2-3.mga7.x86_64
- lib64mspack0-0.10.1-0.alpha.1.mga7.x86_64
- lib64suil0_0-0.10.2-2.mga7.x86_64
- lib64vamp-plugin-sdk2-2.7.1-2.mga7.x86_64
- lib64wx_baseu3.0_0-3.0.4-7.mga7.x86_64
- lib64wx_baseu_net3.0_0-3.0.4-7.mga7.x86_64
- lib64wx_baseu_xml3.0_0-3.0.4-7.mga7.x86_64
- lib64wx_gtk2u_adv3.0_0-3.0.4-7.mga7.x86_64
- lib64wx_gtk2u_core3.0_0-3.0.4-7.mga7.x86_64
- lib64wx_gtk2u_html3.0_0-3.0.4-7.mga7.x86_64
- lib64wx_gtk2u_qa3.0_0-3.0.4-7.mga7.x86_64
- wxgtk-3.0.4-7.mga7.x86_64

- - - 

started audacity from command line

Edited a flac track from a TOOL album, since that accurately reflects how people describe me.  "A real xxxx"

It created a work folder in /tmp

drwx------ 3 brian live 100 Dec 29 16:31 audacity-brian/

Permissions look correct now.

-----

Attaching results from terminal (nothing here that really bothers me)

brian@linux ~]$ audacity
ALSA lib pcm.c:2564:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.rear
ALSA lib pcm.c:2564:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.center_lfe
ALSA lib pcm.c:2564:(snd_pcm_open_noupdate) Unknown PCM cards.pcm.side
ALSA lib pcm_route.c:869:(find_matching_chmap) Found no matching channel map
ALSA lib pcm_route.c:869:(find_matching_chmap) Found no matching channel map
ALSA lib pcm_route.c:869:(find_matching_chmap) Found no matching channel map
ALSA lib pcm_route.c:869:(find_matching_chmap) Found no matching channel map
Expression 'alsa_snd_pcm_hw_params_set_buffer_size_near( pcm, hwParams, &alsaBufferFrames )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 923
Expression 'alsa_snd_pcm_hw_params_set_buffer_size_near( pcm, hwParams, &alsaBufferFrames )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 923
Expression 'alsa_snd_pcm_hw_params_set_buffer_size_near( pcm, hwParams, &alsaBufferFrames )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 923
ALSA lib pcm_oss.c:377:(_snd_pcm_oss_open) Unknown field port
ALSA lib pcm_oss.c:377:(_snd_pcm_oss_open) Unknown field port
ALSA lib pcm_usb_stream.c:486:(_snd_pcm_usb_stream_open) Invalid type for card
ALSA lib pcm_usb_stream.c:486:(_snd_pcm_usb_stream_open) Invalid type for card
Cannot connect to server socket err = No such file or directory
Cannot connect to server request channel
jack server is not running or cannot be started
JackShmReadWritePtr::~JackShmReadWritePtr - Init not done for -1, skipping unlock
JackShmReadWritePtr::~JackShmReadWritePtr - Init not done for -1, skipping unlock
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:21: Debug: ScreenToClient cannot work when toplevel window is not shown
Expression 'ret' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1736
Expression 'AlsaOpen( &alsaApi->baseHostApiRep, params, streamDir, &self->pcm )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1904
Expression 'PaAlsaStreamComponent_Initialize( &self->capture, alsaApi, inParams, StreamDirection_In, NULL != callback )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2171
Expression 'PaAlsaStream_Initialize( stream, alsaHostApi, inputParameters, outputParameters, sampleRate, framesPerBuffer, callback, streamFlags, userData )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2840
Expression 'stream->playback.pcm' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 4628
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
ALSA lib pcm_dsnoop.c:638:(snd_pcm_dsnoop_open) unable to open slave
Expression 'ret' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1736
Expression 'AlsaOpen( &alsaApi->baseHostApiRep, params, streamDir, &self->pcm )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1904
Expression 'PaAlsaStreamComponent_Initialize( &self->capture, alsaApi, inParams, StreamDirection_In, NULL != callback )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2171
Expression 'PaAlsaStream_Initialize( stream, alsaHostApi, inputParameters, outputParameters, sampleRate, framesPerBuffer, callback, streamFlags, userData )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2840
Expression 'stream->playback.pcm' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 4628
Expression 'ret' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1736
Expression 'AlsaOpen( &alsaApi->baseHostApiRep, params, streamDir, &self->pcm )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1904
Expression 'PaAlsaStreamComponent_Initialize( &self->capture, alsaApi, inParams, StreamDirection_In, NULL != callback )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2171
Expression 'PaAlsaStream_Initialize( stream, alsaHostApi, inputParameters, outputParameters, sampleRate, framesPerBuffer, callback, streamFlags, userData )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2840
Expression 'ret' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1736
Expression 'AlsaOpen( &alsaApi->baseHostApiRep, params, streamDir, &self->pcm )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 1904
Expression 'PaAlsaStreamComponent_Initialize( &self->capture, alsaApi, inParams, StreamDirection_In, NULL != callback )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2171
Expression 'PaAlsaStream_Initialize( stream, alsaHostApi, inputParameters, outputParameters, sampleRate, framesPerBuffer, callback, streamFlags, userData )' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 2840
Expression 'stream->playback.pcm' failed in 'src/hostapi/alsa/pa_linux_alsa.c', line: 4628
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ScreenToClient cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: Unrecognized accel key 'backspace', accel string ignored.
16:30:25: Debug: Unrecognized accel key 'backspace', accel string ignored.
16:30:25: Debug: Unrecognized accel key 'numpad_enter', accel string ignored.
16:30:25: Debug: Unrecognized accel key 'numpad_enter', accel string ignored.
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
16:30:25: Debug: ClientToScreen cannot work when toplevel window is not shown
[brian@linux ~]$

CC: (none) => brtians1
Whiteboard: (none) => MGA7-64-OK

Comment 8 Aurelien Oudelet 2020-12-31 10:49:45 CET
Validating.
Advisory pushed to SVN.

CC: (none) => ouaurelien, sysadmin-bugs
Source RPM: audacity-2.4.2-7.mga8.src.rpm => audacity-2.3.1-1.1.mga7.src.rpm
Keywords: (none) => advisory, validated_update
CVE: (none) => CVE-2020-11867

Comment 9 Mageia Robot 2021-01-02 22:53:31 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0001.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.