All ProjectsArch LinuxCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#70051 - [zint] [Security] arbitrary code execution (CVE-2021-27799)

Task Type Bug Report Category Packages Status Closed Assigned To Balló György (City-busz) Levente Polyak (anthraxx) Architecture All Severity High Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Summary ======= The package zint is vulnerable to arbitrary code execution via CVE-2021-27799. Guidance ======== Applying commit 7f8c8114f31c09a986597e0ba63a49f96150368a referenced below fixes the issue. References ========== https://security.archlinux.org/AVG-1625 https://sourceforge.net/p/zint/tickets/218/ https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a/