Bug 31914 - vtk new security issue CVE-2021-42521
Summary: vtk new security issue CVE-2021-42521
Status: RESOLVED OLD
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: All Packagers
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-05-11 18:18 CEST by David Walser
Modified: 2024-01-12 10:51 CET (History)
2 users (show)

See Also:
Source RPM: vtk-9.2.2-5.mga9.src.rpm
CVE:
Status comment: Fixed upstream in 9.2.5

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2023-05-11 18:18:09 CEST 
Fedora has issued an advisory today (May 11):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/PCTMSAAVP4BW2HTZLDWMGKZ2WEC5OFLK/

The issue is fixed upstream in 9.2.5.

Mageia 8 is also affected.
David Walser 2023-05-11 18:18:28 CEST

Status comment: (none) => Fixed upstream in 9.2.5
Whiteboard: (none) => MGA8TOO

Comment 1 Lewis Smith 2023-05-12 20:47:59 CEST 
Different packagers maintain vtk, so assigning this update globally.

Assignee: bugsquad => pkg-bugs

Comment 2 Nicolas Lécureuil 2023-06-27 01:08:58 CEST 
fix pushed into cauldron

Version: Cauldron => 8
Whiteboard: MGA8TOO => (none)
CC: (none) => mageia

Comment 3 Nicolas Salguero 2024-01-12 10:51:40 CET 
Mageia 8 EOL

Resolution: (none) => OLD
CC: (none) => nicolas.salguero
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.