MGASA-2019-0417
Updated filezilla packages fix security vulnerability
Updated filezilla packages fix bugs and a security vulnerability:
Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.
For other fixes in this update, see the referenced versions log.
What each source reports
OSV No score
Updated filezilla packages fix security vulnerability
Updated filezilla packages fix bugs and a security vulnerability:
Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.
For other fixes in this update, see the referenced versions log.
- Record
MGASA-2019-0417- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
filezillaMageia:7 |
before 3.46.3-1.mga7 | 3.46.3-1.mga7 |
libfilezillaMageia:7 |
before 0.19.3-1.mga7 | 0.19.3-1.mga7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2019-0417 is a vulnerability with no CVSS score yet in filezilla, published December 31, 2019. No source lists public exploit code. Fixed in filezilla 3.46.3-1.mga7.