Detections
Analytics

Fedora 24 : libmtp (2017-d26266eb32)

medium Nessus Plugin ID 101512

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

libmtp 1.1.13 =============

Christophe Vu-Brugier (1) :

 - added GoPro HERO5 Black

Emeric Grange (2) :

 - added GoPro HERO5 Session

 - rename F5321 into XPeria X Compact

Gaute Hope (2) :

 - add GoPro Hero+

 - add mtp-detect for GoPro Hero+

Jerry Zhang (1) :

 - Update Google device strings, add (PTP+ADB) id

Marcus Meissner (69) :

 - added archos diamond s https://sourceforge.net/p/libmtp/support-requests/222/

 - added bq aquaris x5 https://sourceforge.net/p/libmtp/support-requests/224/

 - added lenovo k910ss https://sourceforge.net/p/libmtp/bugs/1597/

 - zuk z1 second id https://sourceforge.net/p/libmtp/bugs/1596/

 - zuk z1 log

 - added cat s60 https://sourceforge.net/p/libmtp/feature-requests/176/

 - oneplus one 3 log

 - added archos diamonds , https://sourceforge.net/p/libmtp/support-requests/222/

 - added another alcatel idol 3 id https://sourceforge.net/p/libmtp/bugs/1605/

 - added tp-link neffos c5 https://sourceforge.net/p/libmtp/bugs/1606/

 - added caterpillar cat s40 https://sourceforge.net/p/libmtp/bugs/1603/

 - added lenovo vibe note k5 https://sourceforge.net/p/libmtp/bugs/1608/

 - added BLU studio energy x2 phone adjusted the other BLU id to 4017

 - added huawei y560-l01 https://sourceforge.net/p/libmtp/feature-requests/177/

 - intex aqua fish https://sourceforge.net/p/libmtp/bugs/1613/

 - added bq aquarius x5 (another id) https://sourceforge.net/p/libmtp/feature-requests/181/

 - added HTC Butterfly x920e https://sourceforge.net/p/libmtp/bugs/1615/

 - Motorola Pro+ added https://sourceforge.net/p/libmtp/feature-requests/189/

 - added Lenovo A706 https://sourceforge.net/p/libmtp/support-requests/232/

 - added sony f5231 https://sourceforge.net/p/libmtp/support-requests/230/

 - added Huawei Y360-U61 https://sourceforge.net/p/libmtp/feature-requests/186/ https://bugs.launchpad.net/ubuntu/+source/libmtp/+bug/15 72658

 - added acer liquid z220 https://sourceforge.net/p/libmtp/support-requests/228/

 - added lenovo k920 https://sourceforge.net/p/libmtp/bugs/1595/

 - replace the major.version parsing logic by sscanf, allow a non-minor entry (as seen on Samsung) https://sourceforge.net/p/libmtp/bugs/1593/

 - added lenovo b smartphone https://sourceforge.net/p/libmtp/bugs/1624/

 - added lenovo P1ma40P https://sourceforge.net/p/libmtp/support-requests/235/

 - added HUAWEI Y320-U10 https://sourceforge.net/p/libmtp/bugs/1629/

 - added huawei frd l09 https://sourceforge.net/p/libmtp/bugs/1626/

 - htc desire 626g dual sim https://sourceforge.net/p/libmtp/bugs/1632/

 - render opcodes as opcodes, not ofc. render event names

 - added Kyocera Hydra Wave (model C6740N, Android version 5.1) https://sourceforge.net/p/libmtp/feature-requests/192/

 - added SHARP SHV35 AQUOS U https://sourceforge.net/p/libmtp/feature-requests/192/

 - iriver ak70 https://sourceforge.net/p/libmtp/bugs/1634/

 - Intex AquaFish SailFish OS https://sourceforge.net/p/libmtp/feature-requests/201/

 - added TP-Link Neffos C5 MAX https://sourceforge.net/p/libmtp/feature-requests/197/

 - added tp-link neffos y5l https://sourceforge.net/p/libmtp/feature-requests/196/

 - added tp-link neffos y5 https://sourceforge.net/p/libmtp/feature-requests/195/

 - added Blephone lephone T7+ https://sourceforge.net/p/libmtp/feature-requests/194/

 - added Archos 101b Oxygen https://sourceforge.net/p/libmtp/bugs/1637

 - Merge /u/drzap/libmtp/ branch gopro_heroplus into master

 - added Huawei Nova https://sourceforge.net/p/libmtp/bugs/1640/

 - added acer liquid zest plus

 - added sony xperia z5 debug data https://sourceforge.net/p/libmtp/bugs/1631/

 - added blu energy x lte data

 - added lenovo k5

 - added Lenovo TAB 2 A10-30 https://sourceforge.net/p/libmtp/feature-requests/204/

 - added ASUS ME581CL https://sourceforge.net/p/libmtp/bugs/1642/

 - added Nubia Z9 Max 'NX512j' https://sourceforge.net/p/libmtp/bugs/1646/

 - added Huawei Y360-U03 https://sourceforge.net/p/libmtp/feature-requests/205/

 - nokia lumia 550

 - added Sony XPeria XA https://sourceforge.net/p/libmtp/bugs/1649/

 - added rim blackberry dtek 60 https://sourceforge.net/p/libmtp/bugs/1658/

 - added nextbit robin https://sourceforge.net/p/libmtp/bugs/1663/

 - added lenovo k4 vibe https://sourceforge.net/p/libmtp/bugs/1664/

 - added archos diamond 55 selfie https://sourceforge.net/p/libmtp/feature-requests/209/

 - added yota yotaphone https://sourceforge.net/p/libmtp/bugs/1661/

 - added Asus Zenfone Go (ZC500TG) https://sourceforge.net/p/libmtp/feature-requests/208/

 - Archos 70b Neon https://sourceforge.net/p/libmtp/bugs/1660/

 - added sony xperia xz https://sourceforge.net/p/libmtp/feature-requests/207/

 - imported ptp* from libgphoto2

 - Merge /u/cvubrugier/libmtp/ branch master into master

 - added Lenovo S960 https://sourceforge.net/p/libmtp/bugs/1673/

 - wrong render command, this is opcode not ofc

 - Fixed getpartialobject on non-x86_64 systems

 - Merge branch 'master' of ssh://git.code.sf.net/p/libmtp/code

 - add casts for varargs from 64bit to 32bit

 - Reenable MTP GetObjectProplist for Samsung Galaxy Models. (Seems to work on my S7) Reenable also for Motorola G2. added POINT OF VIEW TAB-I847 https://sourceforge.net/p/libmtp/feature-requests/215/

 - adjusted G2 entry

 - release 1.1.13

Stanisław Pitucha (1) :

 - Add LIBMTP_FILES_AND_FOLDERS_ROOT and fix examples

libmtp 1.1.12 =============

 - Changes in the 1.1.12 release are mostly USB id additions

 - A new asynchronous function to check for events has also been added.

Jocelyn Mayer (1) :

 - added Acer Iconia One 10 https://sourceforge.net/p/libmtp/bugs/1568/

Marcus Meissner (69) :

 - added sony xperia e1 ids https://sourceforge.net/p/libmtp/support-requests/207/

 - added debuginfo for marshall london phone https://sourceforge.net/p/libmtp/bugs/1520/

 - added iRulu X1si https://sourceforge.net/p/libmtp/bugs/1521/

 - hook in travis support

 - merge accumulated ptp lowlevel changes from libgphoto2.

 - run autogen.sh instead of configure

 - avoid question for autoupdateing

 - always build with a libusb avoid failing autoreconf, as we run autogen.sh

 - try to find libtoolize

 - try to find libtool harder

 - hmm . libtool is there, but libtoolize is not

 - added xperia m5 https://sourceforge.net/p/libmtp/bugs/1527/

 - Caterpillar S50 added https://sourceforge.net/p/libmtp/bugs/1525/

 - add cat s50 2nd id

 - currently dont build for osx

 - added another m9 id https://sourceforge.net/p/libmtp/bugs/1508/

 - added haier ct715 https://sourceforge.net/p/libmtp/support-requests/208/

 - added lenovo k900 https://sourceforge.net/p/libmtp/bugs/1529/

 - added letv 1s https://sourceforge.net/p/libmtp/support-requests/210/

 - amazon fire 8 hd https://sourceforge.net/p/libmtp/feature-requests/158/

 - added lenovo vibe x https://sourceforge.net/p/libmtp/bugs/1531/

 - added LeTv X800 Android phone (libmtp-discuss) https://sourceforge.net/p/libmtp/bugs/1542/

 - added another wileyfox swift id https://sourceforge.net/p/libmtp/feature-requests/159/

 - added Sony Xperia C4 Dual https://sourceforge.net/p/libmtp/support-requests/212/

 - Motorola Droid Turbo 2 https://sourceforge.net/p/libmtp/bugs/1539/

 - added Sony WALKMAN NWZ-E474 https://sourceforge.net/p/libmtp/bugs/1540/

 - added BQ Aquaris M5.5 https://sourceforge.net/p/libmtp/bugs/1541/

 - asus zenpad 80 added https://sourceforge.net/p/libmtp/bugs/1546/

 - acer z530 16GB https://sourceforge.net/p/libmtp/bugs/1534/

 - added htc 626 detection log https://sourceforge.net/p/libmtp/bugs/1538/

 - zuk z1 added https://sourceforge.net/p/libmtp/bugs/1545/

 - added lenovo vibe p1 pro https://sourceforge.net/p/libmtp/support-requests/213/

 - htc desire 626s https://sourceforge.net/p/libmtp/bugs/1543/

 - added asus fonepad 8 https://sourceforge.net/p/libmtp/bugs/1548/

 - fairphone 2 os https://sourceforge.net/p/libmtp/support-requests/214/

 - htc desire 626s debug log https://sourceforge.net/p/libmtp/bugs/1543/

 - lenovo k3 note debug data https://sourceforge.net/p/libmtp/feature-requests/162/

 - added acer z630 https://sourceforge.net/p/libmtp/bugs/1552/

 - added lenovo a3500-fl https://sourceforge.net/p/libmtp/bugs/1556/

 - BQ Aquaris M10 Ubuntu Edition Full HD https://sourceforge.net/p/libmtp/feature-requests/163/

 - added Kazam Trooper 650 4G https://sourceforge.net/p/libmtp/bugs/1554/

 - Blackberry Priv https://sourceforge.net/p/libmtp/bugs/1551/

 - bq aquarius avila cooler https://sourceforge.net/p/libmtp/bugs/1558/

 - lenovo vibe k4 note https://sourceforge.net/p/libmtp/bugs/1562/

 - Kyocera Hydro Elite https://sourceforge.net/p/libmtp/feature-requests/164/

 - LG V10 https://sourceforge.net/p/libmtp/bugs/1559/

 - added infocus m808 https://sourceforge.net/p/libmtp/bugs/1567/

 - meizu pro 5 ubuntu phone added https://sourceforge.net/p/libmtp/bugs/1563/

 - added another htc m9 variant https://sourceforge.net/p/libmtp/support-requests/217/

 - added Recon Instruments Snow2 HUD and Recon Instruments Jet

 - LeTV X5001s added https://sourceforge.net/p/libmtp/bugs/1574/

 - added lenovo phab plus https://sourceforge.net/p/libmtp/bugs/1572/

 - Archos 101 xenon lite https://sourceforge.net/p/libmtp/bugs/1573/

 - Huawei Android Phone H60-L12 https://sourceforge.net/p/libmtp/bugs/1550/

 - bravis a401 neo added https://sourceforge.net/p/libmtp/bugs/1553/

 - added lenovo TAB S8-50F https://sourceforge.net/p/libmtp/support-requests/219/

 - added BLU STUDIO ENERGY 2 https://sourceforge.net/p/libmtp/bugs/1575/

 - nVidia Jetson TX1 https://sourceforge.net/p/libmtp/bugs/1582/

 - fix indentation for gcc6

 - letv X800 https://sourceforge.net/p/libmtp/support-requests/220/

 - Archos 40 Helium phone https://sourceforge.net/p/libmtp/bugs/1581/

 - Acer A1-841 https://sourceforge.net/p/libmtp/bugs/1579/

 - added Nokia N1 https://sourceforge.net/p/libmtp/support-requests/221/

 - added Huawei P9 Plus https://sourceforge.net/p/libmtp/feature-requests/173/

 - added archos 50d neon https://sourceforge.net/p/libmtp/bugs/1587/

 - fixed c4 dual names

 - YotaPhone C9660 https://sourceforge.net/p/libmtp/support-requests/127/

 - added Cubot X17 https://sourceforge.net/p/libmtp/feature-requests/161/

 - 1.1.12 release

Philip Langdale (1) :

 - [events] Add an asynchronous function to check for events

Profpatsch (1) :

 - added jolla sailfish 0a07 id

Robert Reardon (1) :

 - added Jolla phone

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected libmtp package.

See Also

https://bodhi.fedoraproject.org/updates/FEDORA-2017-d26266eb32

https://sourceforge.net/p/libmtp/feature-requests/186/

Plugin Details

Severity: Medium

ID: 101512

File Name: fedora_2017-d26266eb32.nasl

Version: 3.6

Type: local

Agent: unix

Published: 7/13/2017

Updated: 1/6/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:libmtp, cpe:/o:fedoraproject:fedora:24

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 7/11/2017

Vulnerability Publication Date: 6/24/2017

Reference Information

CVE: CVE-2017-9831, CVE-2017-9832