Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2022-0066 Moderate: NAS Stack-Based Buffer Overflow Advisory

mageia
Calendar Grey February 17, 2022
Dist Mageia Esm H88
Mageia 2022-0077 addresses vulnerabilities in nas packages related to potential security risks involving a buffer underflow. Discover further details regarding the modifications.
Stack-based buffer overflow in auphone.c that can be triggered by an environment variable

Summary

Stack-based buffer overflow in auphone.c that can be triggered by an environment variable. Also, the x11-util-cf-files package has been patched to allow building nas.

References

- https://bugs.mageia.org/show_bug.cgi?id=30020

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KQX5YL7OVJTMPDFFPFACDNNE2LEUDC3J/

- /

- https://bugzilla.redhat.com/show_bug.cgi?id=1943020

Topics%20covered

Topics Covered

security advisory security update buffer overflow software patch environment variable mageia nas package

Resolution

SRPMS

- 8/core/nas-1.9.4-11.1.mga8

- 8/core/x11-util-cf-files-1.0.6-5.1.mga8

Publication date: 18 Feb 2022
URL: https://advisories.mageia.org/MGASA-2022-0066.html
Type: security

Topics%20covered

Topics Covered

security advisory security update buffer overflow software patch environment variable mageia nas package

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here