Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7 and 8: 2021-0276 Moderate: Slic3r Info Disclosure

mageia
Calendar Grey June 23, 2021
Dist Mageia Esm H88
Mageia 2021-0277 enhances the GIMP application to rectify a significant security vulnerability associated with corrupted TIFF files.
An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42

Summary

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability (CVE-2020-28591).

References

- https://bugs.mageia.org/show_bug.cgi?id=29020

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TCSYYURJTUKJSEZIPDAXK4NHRXZMHIVA/

- https://www.cve.org/CVERecord?id=CVE-2020-28591

Topics%20covered

Topics Covered

security advisory moderate information disclosure out of bounds Mageia Slic3r AMF file

Resolution

SRPMS

- 8/core/slic3r-1.3.0-6.1.mga8

- 7/core/slic3r-1.3.0-1.1.mga7

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0276.html
Type: security
CVE: CVE-2020-28591

Topics%20covered

Topics Covered

security advisory moderate information disclosure out of bounds Mageia Slic3r AMF file

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here