Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 7: MGASA-2020-0118 Moderate: GSocketClient Proxy Flaw

mageia
Calendar Grey March 6, 2020
Dist Mageia Esm H88
Mageia advisory MGASA-2021-0453 outlines a critical glibc vulnerability concerning buffer overflow exploitation.
The updated packages fix a security vulnerability: GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a pro...

Summary

The updated packages fix a security vulnerability:
GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. (CVE-2020-6750)

References

- https://bugs.mageia.org/show_bug.cgi?id=26230

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/5RIFEDSRJ4P3WFCMDUOFQ2LEILZLMDW7/

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KJMLGW55HOQXHMTIPH2PWXFRBNBWVO4W/

- https://www.cve.org/CVERecord?id=CVE-2020-6750

Topics%20covered

Topics Covered

security advisory network security anonymity glib Mageia

Resolution

SRPMS

- 7/core/glib2.0-2.60.2-1.3.mga7

Publication date: 06 Mar 2020
URL: https://advisories.mageia.org/MGASA-2020-0118.html
Type: security
CVE: CVE-2020-6750

Topics%20covered

Topics Covered

security advisory network security anonymity glib Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here