Bug 30717 - teeworlds new security issue CVE-2021-43518
Summary: teeworlds new security issue CVE-2021-43518
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2022-08-06 15:37 CEST by David Walser
Modified: 2022-08-20 12:05 CEST (History)
6 users (show)

See Also:
Source RPM: teeworlds-0.7.5-3.mga9.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2022-08-06 15:37:50 CEST 
Fedora has issued an advisory today (August 6):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/

Mageia 8 is also affected.
David Walser 2022-08-06 15:38:03 CEST

Whiteboard: (none) => MGA8TOO
Status comment: (none) => Patch available from Fedora

Comment 1 Nicolas Lécureuil 2022-08-08 13:52:24 CEST 
fixed in mga 8/9:

src:
    - teeworlds-0.7.5-1.1.mga8

Assignee: rverschelde => qa-bugs
CC: (none) => mageia, rverschelde
Version: Cauldron => 8
Whiteboard: MGA8TOO => (none)

Nicolas Lécureuil 2022-08-08 13:52:28 CEST

Status comment: Patch available from Fedora => (none)

Comment 2 David Walser 2022-08-08 15:53:58 CEST 
teeworlds-0.7.5-1.1.mga8
teeworlds-server-0.7.5-1.1.mga8
teeworlds-data-0.7.5-1.1.mga8

from teeworlds-0.7.5-1.1.mga8.src.rpm
Comment 3 Herman Viaene 2022-08-19 12:10:55 CEST 
MGA8-64 Plasma on Acer Aspire 5253
No installation issues.
Got local teeworlds_srv running and connectiing to it, but nobody to play against of course. Anyway I could point and shoot, and got the proper noises. Could connect to remote server, but no password there.
Seems good enough.

CC: (none) => herman.viaene
Whiteboard: (none) => MGA8-64-OK

Comment 4 Thomas Andrews 2022-08-19 14:06:54 CEST 
Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Dave Hodgins 2022-08-20 02:55:37 CEST

CC: (none) => davidwhodgins
Keywords: (none) => advisory

Comment 5 Mageia Robot 2022-08-20 12:05:43 CEST 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0292.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.