MGASA-2020-0415
- Source
- https://advisories.mageia.org/MGASA-2020-0415.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0415.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0415
- Related
- Published
- 2020-11-13T21:20:36Z
- Modified
- 2020-11-13T20:34:53Z
- Summary
- Updated packagekit packages fix a security vulnerability
- Details
-
It was discovered that packagekit was subject to a vulnerability where the InstallFiles, GetFilesLocal and GetDetailsLocal methods of the DBus interface to PackageKit accesses given files before checking for authorization. This allows non-privileged users to learn the MIME type of any file on the system. (CVE-2020-16121)
- References
- Credits
-
-
- Mageia - COORDINATOR
-