Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: MGASA-2023-0129 Moderate: Stellarium Directory Write Risk

mageia
Calendar Grey April 6, 2023
Dist Mageia Esm H88
Latest versions of Stellarium for Mageia have fixed a critical vulnerability that permitted unauthorized file modifications. Release date: 06 Apr 2023.
Attackers can write to files that are typically unintended, such as ones with absolute pathnames or .

Summary

Attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. (CVE-2023-28371)

References

- https://bugs.mageia.org/show_bug.cgi?id=31742

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KG6UNRAOYZJSMIUELY3MMJ5J6LIUZXLT/

- https://www.cve.org/CVERecord?id=CVE-2023-28371

Topics%20covered

Topics Covered

security advisory moderate directory traversal mageia stellarium file write risk

Resolution

SRPMS

- 8/core/stellarium-0.21.3-1.1.mga8

Publication date: 06 Apr 2023
URL: https://advisories.mageia.org/MGASA-2023-0129.html
Type: security
CVE: CVE-2023-28371

Topics%20covered

Topics Covered

security advisory moderate directory traversal mageia stellarium file write risk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here