Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 7 MGASA-2020-0257 Medium: xawtv File Access Issue

mageia
Calendar Grey June 10, 2020
Dist Mageia Esm H88
Mageia 2020-0257 upgrades xawtv to address file access risks, enhancing overall system protection.
Updated xawtv packages fix security vulnerability: The v4l-conf program in xawtv allows users to determine the existence of file names in directories they do not have access to, a...

Summary

Updated xawtv packages fix security vulnerability:
The v4l-conf program in xawtv allows users to determine the existence of file names in directories they do not have access to, and allows a user to have the system open files they do not have access to, though it does not provide the user access to the file contents (CVE-2020-13696).

References

- https://bugs.mageia.org/show_bug.cgi?id=26736

- https://www.openwall.com/lists/oss-security/2020/06/04/6

- https://www.cve.org/CVERecord?id=CVE-2020-13696

Topics%20covered

Topics Covered

security advisory medium severity file access issue Mageia xawtv

Resolution

SRPMS

- 7/core/xawtv-3.107-1.1.mga7

Severity
medium
Lowest
Low
Medium
High
Critical

Publication date: 10 Jun 2020
URL: https://advisories.mageia.org/MGASA-2020-0257.html
Type: security
CVE: CVE-2020-13696

Topics%20covered

Topics Covered

security advisory medium severity file access issue Mageia xawtv

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here