MGASA-2020-0399
- Source
- https://advisories.mageia.org/MGASA-2020-0399.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0399.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2020-0399
- Related
- Published
- 2020-11-08T14:14:27Z
- Modified
- 2020-11-08T13:39:40Z
- Summary
- Updated libproxy packages fix a security vulnerability
- Details
-
url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header. (CVE-2020-26154)
- References
-
- https://advisories.mageia.org/MGASA-2020-0399.html
- https://bugs.mageia.org/show_bug.cgi?id=27411
- https://lists.suse.com/pipermail/sle-security-updates/2020-October/007540.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3BID3HVHAF6DA3YJOFDBSAZSMR3ODNIW/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / libproxy
Package
- Name
- libproxy
- Purl
- pkg:rpm/mageia/libproxy?distro=mageia-7