[gentoo-announce] [ GLSA 201904-24 ] Ming: Multiple vulnerabilities - gentoo-announce

From:	Aaron Bauman <bman@g.o>
To:	gentoo-announce@l.g.o
Subject:	[gentoo-announce] [ GLSA 201904-24 ] Ming: Multiple vulnerabilities
Date:	Thu, 25 Apr 2019 00:04:01
Message-Id:	`20190424235813.GB29627@monkey`

1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

2

Gentoo Linux Security Advisory                           GLSA 201904-24

3

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

4

                                           https://security.gentoo.org/

5

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

6

7

 Severity: Normal

8

    Title: Ming: Multiple vulnerabilities

9

     Date: April 24, 2019

10

     Bugs: #624712, #626498, #646770

11

       ID: 201904-24

12

13

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

14

15

Synopsis

16

========

17

18

Multiple vulnerabilities have been found in Ming, the worst of which

19

could result in a Denial of Service condition.

20

21

Background

22

==========

23

24

A library for generating Macromedia Flash files.

25

26

Affected packages

27

=================

28

29

    -------------------------------------------------------------------

30

     Package              /     Vulnerable     /            Unaffected

31

    -------------------------------------------------------------------

32

  1  media-libs/ming            < 0.20181112            >= 0.20181112 

33

34

Description

35

===========

36

37

Multiple vulnerabilities have been discovered in Ming. Please review

38

the CVE identifiers referenced below for details.

39

40

Impact

41

======

42

43

Please review the referenced CVE identifiers for details.

44

45

Workaround

46

==========

47

48

There is no known workaround at this time.

49

50

Resolution

51

==========

52

53

All Ming users should upgrade to the latest version:

54

55

  # emerge --sync

56

  # emerge --ask --oneshot --verbose ">=media-libs/ming-0.20181112"

57

58

References

59

==========

60

61

[  1 ] CVE-2017-11728

62

       https://nvd.nist.gov/vuln/detail/CVE-2017-11728

63

[  2 ] CVE-2017-11729

64

       https://nvd.nist.gov/vuln/detail/CVE-2017-11729

65

[  3 ] CVE-2017-11730

66

       https://nvd.nist.gov/vuln/detail/CVE-2017-11730

67

[  4 ] CVE-2017-11731

68

       https://nvd.nist.gov/vuln/detail/CVE-2017-11731

69

[  5 ] CVE-2017-11732

70

       https://nvd.nist.gov/vuln/detail/CVE-2017-11732

71

[  6 ] CVE-2017-11733

72

       https://nvd.nist.gov/vuln/detail/CVE-2017-11733

73

[  7 ] CVE-2017-11734

74

       https://nvd.nist.gov/vuln/detail/CVE-2017-11734

75

[  8 ] CVE-2017-9988

76

       https://nvd.nist.gov/vuln/detail/CVE-2017-9988

77

[  9 ] CVE-2017-9989

78

       https://nvd.nist.gov/vuln/detail/CVE-2017-9989

79

[ 10 ] CVE-2018-5251

80

       https://nvd.nist.gov/vuln/detail/CVE-2018-5251

81

[ 11 ] CVE-2018-5294

82

       https://nvd.nist.gov/vuln/detail/CVE-2018-5294

83

[ 12 ] CVE-2018-6315

84

       https://nvd.nist.gov/vuln/detail/CVE-2018-6315

85

[ 13 ] CVE-2018-6358

86

       https://nvd.nist.gov/vuln/detail/CVE-2018-6358

87

[ 14 ] CVE-2018-6359

88

       https://nvd.nist.gov/vuln/detail/CVE-2018-6359

89

90

Availability

91

============

92

93

This GLSA and any updates to it are available for viewing at

94

the Gentoo Security Website:

95

96

 https://security.gentoo.org/glsa/201904-24

97

98

Concerns?

99

=========

100

101

Security is a primary focus of Gentoo Linux and ensuring the

102

confidentiality and security of our users' machines is of utmost

103

importance to us. Any security concerns should be addressed to

104

security@g.o or alternatively, you may file a bug at

105

https://bugs.gentoo.org.

106

107

License

108

=======

109

110

Copyright 2019 Gentoo Foundation, Inc; referenced text

111

belongs to its owner(s).

112

113

The contents of this document are licensed under the

114

Creative Commons - Attribution / Share Alike license.

115

116

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Archives: gentoo-announce

Attachments

1	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2	Gentoo Linux Security Advisory GLSA 201904-24
3	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
4	https://security.gentoo.org/
5	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6
7	Severity: Normal
8	Title: Ming: Multiple vulnerabilities
9	Date: April 24, 2019
10	Bugs: #624712, #626498, #646770
11	ID: 201904-24
12
13	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
14
15	Synopsis
16	========
17
18	Multiple vulnerabilities have been found in Ming, the worst of which
19	could result in a Denial of Service condition.
20
21	Background
22	==========
23
24	A library for generating Macromedia Flash files.
25
26	Affected packages
27	=================
28
29	-------------------------------------------------------------------
30	Package / Vulnerable / Unaffected
31	-------------------------------------------------------------------
32	1 media-libs/ming < 0.20181112 >= 0.20181112
33
34	Description
35	===========
36
37	Multiple vulnerabilities have been discovered in Ming. Please review
38	the CVE identifiers referenced below for details.
39
40	Impact
41	======
42
43	Please review the referenced CVE identifiers for details.
44
45	Workaround
46	==========
47
48	There is no known workaround at this time.
49
50	Resolution
51	==========
52
53	All Ming users should upgrade to the latest version:
54
55	# emerge --sync
56	# emerge --ask --oneshot --verbose ">=media-libs/ming-0.20181112"
57
58	References
59	==========
60
61	[ 1 ] CVE-2017-11728
62	https://nvd.nist.gov/vuln/detail/CVE-2017-11728
63	[ 2 ] CVE-2017-11729
64	https://nvd.nist.gov/vuln/detail/CVE-2017-11729
65	[ 3 ] CVE-2017-11730
66	https://nvd.nist.gov/vuln/detail/CVE-2017-11730
67	[ 4 ] CVE-2017-11731
68	https://nvd.nist.gov/vuln/detail/CVE-2017-11731
69	[ 5 ] CVE-2017-11732
70	https://nvd.nist.gov/vuln/detail/CVE-2017-11732
71	[ 6 ] CVE-2017-11733
72	https://nvd.nist.gov/vuln/detail/CVE-2017-11733
73	[ 7 ] CVE-2017-11734
74	https://nvd.nist.gov/vuln/detail/CVE-2017-11734
75	[ 8 ] CVE-2017-9988
76	https://nvd.nist.gov/vuln/detail/CVE-2017-9988
77	[ 9 ] CVE-2017-9989
78	https://nvd.nist.gov/vuln/detail/CVE-2017-9989
79	[ 10 ] CVE-2018-5251
80	https://nvd.nist.gov/vuln/detail/CVE-2018-5251
81	[ 11 ] CVE-2018-5294
82	https://nvd.nist.gov/vuln/detail/CVE-2018-5294
83	[ 12 ] CVE-2018-6315
84	https://nvd.nist.gov/vuln/detail/CVE-2018-6315
85	[ 13 ] CVE-2018-6358
86	https://nvd.nist.gov/vuln/detail/CVE-2018-6358
87	[ 14 ] CVE-2018-6359
88	https://nvd.nist.gov/vuln/detail/CVE-2018-6359
89
90	Availability
91	============
92
93	This GLSA and any updates to it are available for viewing at
94	the Gentoo Security Website:
95
96	https://security.gentoo.org/glsa/201904-24
97
98	Concerns?
99	=========
100
101	Security is a primary focus of Gentoo Linux and ensuring the
102	confidentiality and security of our users' machines is of utmost
103	importance to us. Any security concerns should be addressed to
104	security@g.o or alternatively, you may file a bug at
105	https://bugs.gentoo.org.
106
107	License
108	=======
109
110	Copyright 2019 Gentoo Foundation, Inc; referenced text
111	belongs to its owner(s).
112
113	The contents of this document are licensed under the
114	Creative Commons - Attribution / Share Alike license.
115
116	https://creativecommons.org/licenses/by-sa/2.5