MGASA-2026-0227

Source
https://advisories.mageia.org/MGASA-2026-0227.html
Import Source
https://advisories.mageia.org/MGASA-2026-0227.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0227
Upstream
Published
2026-06-23T06:04:47Z
Modified
2026-06-23T06:15:04.827663066Z
Summary
Updated sslh packages fix security vulnerabilities
Details

CVE-2025-46806, A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures CVE-2025-46807, A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service. CVE-2025-52936, Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh

References
Credits

Affected packages

Mageia:9 / sslh

Package

Name
sslh
Purl
pkg:rpm/mageia/sslh?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.3.1-1.1.mga9

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2026-0227.json"