Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8: MGASA-2021-0401 Moderate: Dino Directory Traversal

mageia
Calendar Grey August 14, 2021
Dist Mageia Esm H88
MGASA-2021-0402 details vulnerabilities in kitty software versions prior to 0.14.0, highlighting improper input validation that could enable remote code execution
Updated dino packages fix security vulnerability: Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separat...

Summary

Updated dino packages fix security vulnerability:
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators(CVE-2021-33896).

References

- https://bugs.mageia.org/show_bug.cgi?id=29329

- https://dino.im/security/cve-2021-33896/

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P55V3TVSVXREOJAJRXNUSBEUZFOU54V3/

- https://www.cve.org/CVERecord?id=CVE-2021-33896

Topics%20covered

Topics Covered

security advisory security issue software update directory traversal moderate severity Mageia Dino

Resolution

SRPMS

- 8/core/dino-0.2.0-1.1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 14 Aug 2021
URL: https://advisories.mageia.org/MGASA-2021-0401.html
Type: security
CVE: CVE-2021-33896

Topics%20covered

Topics Covered

security advisory security issue software update directory traversal moderate severity Mageia Dino

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here