Upstream has issued advisories on December 13: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-26258 https://x-stream.github.io/CVE-2020-26258.html https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-26259 https://x-stream.github.io/CVE-2020-26259.html https://github.com/x-stream/xstream/security/advisories/GHSA-jfvx-7wrx-43fh The issues are fixed upstream in 1.4.15. Mageia 7 is also affected.
Whiteboard: (none) => MGA7TOOCC: (none) => zombie_ryushu
Blocks: (none) => 27849
Status comment: (none) => Fixed upstream in 1.4.15
version 1.4.15 pushed in cauldron
Whiteboard: MGA7TOO => (none)CC: (none) => mageiaVersion: Cauldron => 7
Debian-LTS has issued an advisory for this on December 31: https://www.debian.org/lts/security/2020/dla-2507
Debian has issued an advisory for this on January 7: https://www.debian.org/security/2021/dsa-4828
openSUSE has issued an advisory for this on January 22: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CTO6QRFLVKVHOYBP6VLJP4KZXZFZSKET/
Depends on: (none) => 28844
https://blog.mageia.org/en/2021/06/08/mageia-7-will-reach-end-of-support-on-30th-of-june-the-king-is-dead-long-live-the-king/
Status: NEW => RESOLVEDResolution: (none) => OLD