Stay Secure with the Latest Linux Advisories

security advisorysecurity issueMidnight Commander

Mageia 8: 2022-0086 Moderate: mc SFTP Authentication Flaw

An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity. (CVE-2021-36370) . MGASA-2022-0086 - Updated mc packages fix security vulnerability Publication date: 06 Mar 2022 URL: https://advisories.mageia.org/MGASA-2022-0086.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-36370 An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity. (CVE-2021-36370) References: - https://bugs.mageia.org/show_bug.cgi?id=30107 - - https://www.cve.org/CVERecord?id=CVE-2021-36370 SRPMS: - 8/core/mc-4.8.27-1.mga8 . Unveil the Mageia 2022-0086 patch designed to address vulnerabilities in mc that impact SFTP link integrity and server validation protocols.. Mageia Security Update, Midnight Commander, SFTP Vulnerability. . LinuxSecurity.com Team

Mar 06, 2022 Mageia