MGASA-2025-0005 - Updated rizin packages fix security vulnerability

Publication date: 12 Jan 2025
URL: https://advisories.mageia.org/MGASA-2025-0005.html
Type: security
Affected Mageia releases: 9
CVE: CVE-2022-1207

Command injection via RzBinInfo bclass due legacy code. (CVE-2022-1207)

References:
- https://bugs.mageia.org/show_bug.cgi?id=33895
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YNDCM5TGWRLSMIJ74ZI6LMNSCCH5DBPL/
- https://github.com/rizinorg/rizin/security/advisories/GHSA-5jhc-frm4-p8v9
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1207

SRPMS:
- 9/core/rizin-0.5.2-1.1.mga9

Mageia 2025-0005: rizin Security Advisory Updates

Command injection via RzBinInfo bclass due legacy code

Summary

Command injection via RzBinInfo bclass due legacy code. (CVE-2022-1207)

References

- https://bugs.mageia.org/show_bug.cgi?id=33895

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YNDCM5TGWRLSMIJ74ZI6LMNSCCH5DBPL/

- https://github.com/rizinorg/rizin/security/advisories/GHSA-5jhc-frm4-p8v9

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1207

Resolution

MGASA-2025-0005 - Updated rizin packages fix security vulnerability

SRPMS

- 9/core/rizin-0.5.2-1.1.mga9

Severity
Publication date: 12 Jan 2025
URL: https://advisories.mageia.org/MGASA-2025-0005.html
Type: security
CVE: CVE-2022-1207

Related News