MGASA-2016-0118
- Source
- https://advisories.mageia.org/MGASA-2016-0118.html
- Import Source
- https://advisories.mageia.org/MGASA-2016-0118.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2016-0118
- Related
- Published
- 2016-03-25T06:38:37Z
- Modified
- 2016-03-25T06:20:30Z
- Summary
- Updated filezilla packages fix security vulnerability
- Details
-
Many versions of PSCP in PuTTY prior to 0.67 have a stack corruption vulnerability in their treatment of the 'sink' direction (i.e. downloading from server to client) of the old-style SCP protocol. In order for this vulnerability to be exploited, the user must connect to a malicious server and attempt to download any file (CVE-2016-2563).
FileZilla was vulnerable to this issue as it bundles a copy of PuTTY. The filezilla package has been updated to version 3.16.1, which fixes this issue and has many other fixes and enhancements.
- References
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:5 / filezilla
Package
- Name
- filezilla
- Purl
- pkg:rpm/mageia/filezilla?distro=mageia-5
Mageia:5 / libfilezilla
Package
- Name
- libfilezilla
- Purl
- pkg:rpm/mageia/libfilezilla?distro=mageia-5
Mageia:5 / pugixml
Package
- Name
- pugixml
- Purl
- pkg:rpm/mageia/pugixml?distro=mageia-5