Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 32: libproxy 2020-2407cb0512 Critical: Stack Exhaustion Fix

fedora
Calendar Grey September 23, 2020
Dist Fedora Esm H88
Action required: Fedora 32 users must update libproxy to address stack overflow vulnerability associated with CVE-2020-25219. Boost your system protection today!
Fix CVE-2020-25219

Summary

libproxy offers the following features:

* extremely small core footprint (< 35K)

* no external dependencies within libproxy core

(libproxy plugins may have dependencies)

* only 3 functions in the stable external API

* dynamic adjustment to changing network topology

* a standard way of dealing with proxy settings across all scenarios

* a sublime sense of joy and accomplishment

Fix CVE-2020-25219

* Fri Sep 18 2020 David King - 0.4.15-18

- Fix CVE-2020-25219 (#1880350)

[ 1 ] Bug #1880349 - CVE-2020-25219 libproxy: uncontrolled recursion via an infinite stream response leading to stack exhaustion

https://bugzilla.redhat.com/show_bug.cgi?id=1880349

su -c 'dnf upgrade --advisory FEDORA-2020-2407cb0512' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 32
Version: 0.4.15
Release: 18.fc32
Summary: A library handling all the details of proxy configuration

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here