Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity issue

Mageia 7 MGASA-2020-0452 Moderate: Oniguruma Buffer Overflow

In Oniguruma, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c (CVE-2020-26159). References: . MGASA-2020-0452 - Updated oniguruma packages fix security vulnerability Publication date: 08 Dec 2020 URL: https://advisories.mageia.org/MGASA-2020-0452.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-26159 In Oniguruma, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c (CVE-2020-26159). References: - https://bugs.mageia.org/show_bug.cgi?id=27387 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/ZFUJY7BUIFBTZ3IUHVHCID4JYCRDGKPS/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00006.html - https://www.openwall.com/lists/oss-security/2020/09/30/7 - https://www.cve.org/CVERecord?id=CVE-2020-26159 SRPMS: - 7/core/oniguruma-6.9.4-1.1.mga7 . A critical patch for Mageia resolves vulnerability in Oniguruma, strengthening defense against regex-related buffer overflow attacks.. Oniguruma Security Update, Mageia 7 Advisory, Buffer Overflow Fix. . LinuxSecurity.com Team

Dec 08, 2020 Mageia