Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2019-0249 Moderate: Sigil Arbitrary File Write Issue

mageia
Calendar Grey September 6, 2019
Dist Mageia Esm H88
The latest Sigil release addresses a significant security vulnerability linked to improperly formatted EPUB documents that allowed unauthorized writes to the filesystem.
Updated sigil package fixes security vulnerability: Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files

Summary

Updated sigil package fixes security vulnerability:
Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files. An attacker could use this vulnerability to write arbitrary files to the filesystem (CVE-2019-14452).

References

- https://bugs.mageia.org/show_bug.cgi?id=25290

- https://ubuntu.com/security/notices/USN-4085-1

- https://www.cve.org/CVERecord?id=CVE-2019-14452

Topics%20covered

Topics Covered

security advisory security issue file system malformed files Mageia arbitrary files Sigil

Resolution

SRPMS

- 6/core/sigil-0.9.16-1.mga6

- 7/core/sigil-0.9.16-1.mga7

Publication date: 06 Sep 2019
URL: https://advisories.mageia.org/MGASA-2019-0249.html
Type: security
CVE: CVE-2019-14452

Topics%20covered

Topics Covered

security advisory security issue file system malformed files Mageia arbitrary files Sigil

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here