Advisories » MGASA-2017-0292

Updated shutter packages fix security vulnerability

Publication date: 21 Aug 2017
Modification date: 21 Aug 2017
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2016-10081

Description

Remote attackers could trick users into assisting them in executing
arbitrary commands via a crafted image name that is mishandled during a
"Run a plugin" action (CVE-2016-10081).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21560
• https://lists.opensuse.org/opensuse-updates/2017-08/msg00081.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10081

SRPMS

5/core

• shutter-0.93.1-1.2.mga5

6/core

• shutter-0.93.1-6.1.mga6