MGASA-2021-0276 - Updated slic3r package fixes a security vulnerability Publication date: 23 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0276.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2020-28591 An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability (CVE-2020-28591). References: - https://bugs.mageia.org/show_bug.cgi?id=29020 - https://lists.fedoraproject.org/archives/list/[email protected]/thread/TCSYYURJTUKJSEZIPDAXK4NHRXZMHIVA/ - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28591 SRPMS: - 8/core/slic3r-1.3.0-6.1.mga8 - 7/core/slic3r-1.3.0-1.1.mga7
Mageia 2021-0276: slic3r security update
An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42
Summary
CVE: CVE-2020-28591
An out-of-bounds read vulnerability exists in the AMF File
AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and
Master Commit 92abbc42. A specially crafted AMF file can lead to information
disclosure. An attacker can provide a malicious file to trigger this
vulnerability (CVE-2020-28591).
Resolution
MGASA-2021-0276 - Updated slic3r package fixes a security vulnerability
References
- https://bugs.mageia.org/show_bug.cgi?id=29020
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/TCSYYURJTUKJSEZIPDAXK4NHRXZMHIVA/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28591
Severity
Issued Date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0276.html
Type: security
Affected Mageia releases: 7, 8
News
HOWTOs
Features
Black Hat USA & DEFCON 2021 Coverage on LinuxSecurity: What You Need to Know
TLS Email Encryption Explained - How To Encrypt Email with TLS
Keeping Your System Secure is Easier than Ever with LinuxSecurity Customized Advisories!
The State of Vulnerability Management and Patching in The Enterprise Environment
Complete Guide to Installing Security Updates in Debian & Ubuntu
About Us
Powered By
