Advisories » MGASA-2017-0011

Updated flightgear packages fix security vulnerability

Publication date: 09 Jan 2017
Modification date: 09 Jan 2017
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-9956

Description

A security bug CVE-2016-9956 was found in all FlightGear versions since
2009, that allow an attacker to overwrite any file the flightgear user
owns. The Debian adaptation of upstream patch was applied to the Mageia
FlightGear package.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19948
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848114
• http://openwall.com/lists/oss-security/2016/12/15/10
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9956

SRPMS

5/core

• flightgear-3.4.0-2.1.mga5