PatchTheCVEmageia project vulnerabilities
Recent CVEs affecting mageia project products. 13 tracked.
mageia project has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2015-03-18. Highest priority: CVE-2014-9274 (score 60/100).
- CVE-2015-2296 MEDIUM 6.8 MITIGATE DOWNGRADE The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to condu
- CVE-2014-9274 HIGH 7.5 UPGRADE MITIGATE UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demo
- CVE-2014-9039 MEDIUM 4.3 MITIGATE MITIGATE wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might all
- CVE-2014-9037 MEDIUM 6.8 MITIGATE UPGRADE WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attack
- CVE-2014-8764 MEDIUM 5.0 MITIGATE UPGRADE DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers
- CVE-2014-8763 MEDIUM 5.0 UPGRADE MITIGATE DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to b
- CVE-2014-7824 LOW 2.1 MITIGATE MITIGATE D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cau
- CVE-2014-4668 MEDIUM 6.8 MITIGATE MITIGATE The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is u
- CVE-2014-3533 LOW 2.1 MITIGATE MITIGATE dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) v
- CVE-2014-3424 LOW 3.3 MITIGATE UPGRADE lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symli
- CVE-2014-3423 LOW 3.3 MITIGATE UPGRADE lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a sym
- CVE-2014-3422 LOW 3.3 UPGRADE MITIGATE lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a
- CVE-2014-3421 LOW 3.3 MITIGATE UPGRADE lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a syml
FAQ
How do I fix mageia project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mageia project being exploited right now?
None of the tracked mageia project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mageia project CVE should I patch first?
CVE-2014-9274 currently ranks highest (60/100): UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demo.