Advisories » MGASA-2014-0015

Updated zabbix packages fix two security vulnerabilities

Publication date: 21 Jan 2014
Modification date: 09 Jul 2015
Type: security
Affected Mageia releases : 3
CVE: CVE-2013-5743 , CVE-2013-6824

Description

Updated zabbix packages fixes security vulnerability:

This update multiples vulnerabilities.

- Fix vulnerability for remote command execution injection
  (ZBX-7479, CVE-2013-6824)
- Fix SQL injection vulnerability (ZBX-7091, CVE-2013-5743)
- Fix XSS issues (ZBX-6952)
                

References

• https://support.zabbix.com/browse/ZBX-7479
• https://support.zabbix.com/browse/ZBX-7091
• https://support.zabbix.com/browse/ZBX-6952
• http://www.zabbix.com/rn2.0.9.php
• http://www.zabbix.com/rn2.0.10.php
• https://lists.fedoraproject.org/pipermail/package-announce/2013-December/123446.html
• https://bugs.mageia.org/show_bug.cgi?id=11868
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5743
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6824

SRPMS

3/core

• zabbix-2.0.10-1.mga3