Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Mageia 9 MGASA-2024-0159 Critical: Guava Temporary File Access

mageia
Calendar Grey April 30, 2024
Dist Mageia Esm H88
Mageia introduces MGASA-2024-0160 that addresses vulnerabilities in Guava's insecure file handling. Discover the details.
A bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava

Summary

A bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava. (CVE-2020-8908) Predictable temporary files and directories used in FileBackedOutputStream. (CVE-2023-2976)

References

- https://bugs.mageia.org/show_bug.cgi?id=33071

- https://www.cve.org/CVERecord?id=CVE-2020-8908

- https://www.cve.org/CVERecord?id=CVE-2023-2976

Topics%20covered

Topics Covered

security advisory critical access issue data access Mageia mageia Guava bug advisory

Resolution

SRPMS

- 9/core/guava-32.0.1-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 30 Apr 2024
URL: https://advisories.mageia.org/MGASA-2024-0159.html
Type: security
CVE: CVE-2020-8908, CVE-2023-2976

Topics%20covered

Topics Covered

security advisory critical access issue data access Mageia mageia Guava bug advisory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here