MGASA-2026-0575
- Source
- https://advisories.mageia.org/MGASA-2026-0575.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0575.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0575
- Upstream
CVE (2)
- Published
- 2026-11-05T05:11:54Z
- Modified
- 2026-11-05T05:15:03Z
- Summary
- Updated stunnel package fixes security vulnerabilities
- Details
-
Localhost-filter bypass in SOCKS server mode. (CVE-2026-70367) Out-of-bounds memory access when logging long protocol messages. (CVE-2026-70368)
- References
-
- https://advisories.mageia.org/MGASA-2026-0575.html
- https://bugs.mageia.org/show_bug.cgi?id=36183
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/472TIVLEO2YOJZVNWJR6RWFE3SX4M7P6/
- https://bugzilla.redhat.com/show_bug.cgi?id=2462083
- https://www.stunnel.org/CVE-2026-70367.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2462029
- https://www.stunnel.org/CVE-2026-70368.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IX766E4H5ND5VOKDYVM2E2GUCKKG6EDD/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / stunnel
Package
- Name
- stunnel
- Purl
- pkg:rpm/mageia/stunnel?arch=source&distro=mageia-10