Advisories » MGASA-2019-0007

Updated units package fixes security vulnerability

Publication date: 05 Jan 2019
Modification date: 05 Jan 2019
Type: security
Affected Mageia releases : 6

Description

A flaw was found in units. units_cur doesn't sanitize downloaded data.
This allows a maliciously intended server to execute arbitrary code
remotely on the client (rhbz#1598913).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23455
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NGM5T2F2STAUWF76LMEA7NCLE3STBAQI/

SRPMS

6/core

• units-2.18-1.mga6