Back

Mageia 2020-0257: xawtv security update

Date 10 Jun 2020

Category Mageia Linux Distribution - Security Advisories

119

Posted By LinuxSecurity Advisories

Updated xawtv packages fix security vulnerability: The v4l-conf program in xawtv allows users to determine the existence of file names in directories they do not have access to, and allows a user to have the system open files they do not have access to, though it does

MGASA-2020-0257 - Updated xawtv packages fix security vulnerability

Publication date: 10 Jun 2020
URL: https://advisories.mageia.org/MGASA-2020-0257.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2020-13696

Updated xawtv packages fix security vulnerability:

The v4l-conf program in xawtv allows users to determine the existence of
file names in directories they do not have access to, and allows a user
to have the system open files they do not have access to, though it does
not provide the user access to the file contents (CVE-2020-13696).

References:
- https://bugs.mageia.org/show_bug.cgi?id=26736
- https://www.openwall.com/lists/oss-security/2020/06/04/6
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13696

SRPMS:
- 7/core/xawtv-3.107-1.1.mga7