Groups > linux.debian.bugs.dist > #1012679

Bug#962221: xawtv: CVE-2020-13696

From	Salvatore Bonaccorso <carnil@debian.org>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#962221: xawtv: CVE-2020-13696
Date	2020-06-04 19:40 +0200
Message-ID	<Ae20p-We-3@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Source: xawtv
Version: 3.106-1
Severity: grave
Tags: security upstream

Hi,

The following vulnerability was published for xawtv.

CVE-2020-13696[0]:
| v4l-conf setuid-root program allows file existence tests and open(...,
| O_RDRW) on arbitrary files

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2020-13696
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13696
[1] https://www.openwall.com/lists/oss-security/2020/06/04/6

Regards,
Salvatore

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#962221: xawtv: CVE-2020-13696 Salvatore Bonaccorso <carnil@debian.org> - 2020-06-04 19:40 +0200
  Bug#962221: Fixes for CVE-2020-13696 (#962221) Mattia Rizzolo <mattia@debian.org> - 2020-07-07 16:30 +0200
  Bug#962221: Fixes for CVE-2020-13696 (#962221) Jeremy Sowden <jeremy@azazel.net> - 2020-07-08 10:40 +0200

csiph-web