Advisories » MGASA-2018-0287

Updated freedink-dfarc package fixes security vulnerability

Publication date: 17 Jun 2018
Modification date: 17 Jun 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-0496

Description

Sylvain Beucler and Dan Walma discovered several directory traversal issues
in DFArc (as well as in the RTsoft's Dink Smallwood HD / ProtonSDK version),
allowing an attacker to overwrite arbitrary files on the user's system
(CVE-2018-0496).

This release fixes it, and brings translation updates.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23188
• https://savannah.gnu.org/forum/forum.php?forum_id=9169
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0496

SRPMS

6/core

• freedink-dfarc-3.14-1.mga6