{"id":"MGASA-2022-0066","aliases":[],"status":"published","title":"Updated nas packages fix security vulnerability","description":"Stack-based buffer overflow in auphone.c that can be triggered by an\nenvironment variable.\n\nAlso, the x11-util-cf-files package has been patched to allow building nas.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-02-18T00:14:24Z","modified":"2026-04-16T04:24:02Z","fixes":[{"ecosystem":"Mageia:8","package":"nas","fixed_in":["1.9.4-11.1.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"x11-util-cf-files","fixed_in":["1.0.6-5.1.mga8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:8","package":"nas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-11.1.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"x11-util-cf-files","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-5.1.mga8"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2022-0066.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30020","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KQX5YL7OVJTMPDFFPFACDNNE2LEUDC3J/","tags":["web"]},{"url":"https://sourceforge.net/p/nas/bugs/8/","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943020","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2022-0066","title":"Updated nas packages fix security vulnerability","description":"Stack-based buffer overflow in auphone.c that can be triggered by an\nenvironment variable.\n\nAlso, the x11-util-cf-files package has been patched to allow building nas.\n","status":"published","published":"2022-02-18T00:14:24Z","modified":"2026-04-16T04:24:02.631591Z","updated_at":"2026-11-02T15:49:41.849028Z"}]}}