Mageia 2021-0276: slic3r security update | LinuxSecurity.com

Advisories

What Are You Looking For?

Popular Tags

Contribute

Advisories This Week: 380

MGASA-2021-0276 - Updated slic3r package fixes a security vulnerability

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0276.html
Type: security
Affected Mageia releases: 7, 8
CVE: CVE-2020-28591

An out-of-bounds read vulnerability exists in the AMF File
AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and
Master Commit 92abbc42. A specially crafted AMF file can lead to information
disclosure. An attacker can provide a malicious file to trigger this
vulnerability (CVE-2020-28591).

References:
- https://bugs.mageia.org/show_bug.cgi?id=29020
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/TCSYYURJTUKJSEZIPDAXK4NHRXZMHIVA/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28591

SRPMS:
- 8/core/slic3r-1.3.0-6.1.mga8
- 7/core/slic3r-1.3.0-1.1.mga7

Mageia 2021-0276: slic3r security update

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42

Summary

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability (CVE-2020-28591).

References

- https://bugs.mageia.org/show_bug.cgi?id=29020

- https://lists.fedoraproject.org/archives/list/[email protected]/thread/TCSYYURJTUKJSEZIPDAXK4NHRXZMHIVA/

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28591

Resolution

MGASA-2021-0276 - Updated slic3r package fixes a security vulnerability

SRPMS

- 8/core/slic3r-1.3.0-6.1.mga8

- 7/core/slic3r-1.3.0-1.1.mga7

Severity
Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0276.html
Type: security
CVE: CVE-2020-28591

News

Advisories

HOWTOs

Features

The Story Behind the Linux Security Quick Reference Guide
Benefits & Drawbacks of Using a VPN on Linux
How a WAF Could Improve the Security of Your Linux Web Applications
Installing SurfShark VPN On Kali Linux: The Authoritative Guide
Best Practices for PHP Security

About Us

Powered By

Footer Logo

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy. 

Learn More About Our Cookie Policy