{"id":"MGASA-2019-0205","summary":"Updated dosbox package fixes security vulnerabilities","details":"Dosbox 0.74-3 is a security release:\n* Fixed that a very long line inside a bat file would overflow the\n  parsing buffer. (CVE-2019-7165 by Alexandre Bartel)\n* Added a basic permission system so that a program running inside\n  DOSBox can't access the contents of /proc (e.g. /proc/self/mem) when\n  / or /proc were (to be) mounted. (CVE-2019-12594 by Alexandre Bartel)\n\nIt also brings several other fixes for out of bounds access and buffer\noverflows, and some fixes to the OpenGL rendering.\n\nThe game compatibility should be identical to 0.74 and 0.74-2.\nIt is recommended to use config -securemode when dealing with untrusted\nfiles.\n","modified":"2026-04-16T04:42:51.885173483Z","published":"2019-07-10T10:44:10Z","upstream":["CVE-2019-12594","CVE-2019-7165"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2019-0205.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=25013"}],"affected":[{"package":{"name":"dosbox","ecosystem":"Mageia:6","purl":"pkg:rpm/mageia/dosbox?arch=source&distro=mageia-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.3-1.mga6"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2019-0205.json"}},{"package":{"name":"dosbox","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/dosbox?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.3-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2019-0205.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}