Lucene search

K
mageiaGentoo FoundationMGASA-2018-0278
HistoryJun 14, 2018 - 9:14 p.m.

Updated scummvm packages fix security vulnerability

2018-06-1421:14:36
Gentoo Foundation
advisories.mageia.org
13

0.002 Low

EPSS

Percentile

58.1%

Updated scummvm package fixes security vulnerability ScummVM 1.8.1’s POSIX backend does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL (CVE-2017-17528). This update fixes it, and updates ScummVM to the latest 2.0.0 upstream release, adding support for 23 new games, and several bug fixes.

OSVersionArchitecturePackageVersionFilename
Mageia6noarchscummvm< 2.0.0-1scummvm-2.0.0-1.mga6

0.002 Low

EPSS

Percentile

58.1%