From Mageia wiki
MGASA-2012-0372
| Date: | December 31st, 2012 |
| Affected releases: | 2 |
Description:
Updated fail2ban package fixes security vulnerability:
fail2ban before 0.8.8 didn't escape the content of <matches> (if used
in custom action files), which could cause issues on the system running
fail2ban as it scans log files, depending on what content is matched,
since that content could contain arbitrary symbols.
Updated Packages:
fail2ban-0.8.6-3.1.mga2
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5642
http://lists.fedoraproject.org/pipermail/package-announce/2012-December/095127.html
https://bugs.mageia.org/show_bug.cgi?id=8542
