MGASA-2021-0235

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0235.html

Import Source

https://advisories.mageia.org/MGASA-2021-0235.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2021-0235

Related

Published

2021-06-08T14:33:02Z

Modified

2021-06-07T08:37:44Z

Summary

Updated mpv packages fix a security vulnerability

Details

Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file (CVE-2021-30145).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.29.1-8.1.mga7

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.32.0-6.1.mga8

{
    "section": "core"
}