MGASA-2026-0474
- Source
- https://advisories.mageia.org/MGASA-2026-0474.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0474.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0474
- Upstream
CVE (2)
- Published
- 2026-10-09T17:00:24Z
- Modified
- 2026-10-09T17:15:03Z
- Summary
- Updated capnproto package fixes security vulnerabilities
- Details
-
A negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead (CVE-2026-32239). When using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer (CVE-2026-32240).
- References
-
- https://advisories.mageia.org/MGASA-2026-0474.html
- https://bugs.mageia.org/show_bug.cgi?id=36190
- https://ubuntu.com/security/notices/USN-8650-1
- https://github.com/capnproto/capnproto/security/advisories/GHSA-qjx3-pp3m-9jpm
- https://github.com/capnproto/capnproto/security/advisories/GHSA-vpcq-mx5v-32wm
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / capnproto
Package
- Name
- capnproto
- Purl
- pkg:rpm/mageia/capnproto?arch=source&distro=mageia-10