Stay Secure with the Latest Linux Advisories

security advisorysecurity issuecritical

Mageia 7 Security Alert: MGASA-2021-0314 Critical HttpComponents Issue

Priyank Nigam discovered that HttpComponents Client could misinterpret malformed authority component in a request URI and pick the wrong target host for request execution (CVE-2020-13956). References: . MGASA-2021-0314 - Updated httpcomponents-client packages fix a security vulnerability Publication date: 06 Jul 2021 URL: https://advisories.mageia.org/MGASA-2021-0314.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-13956 Priyank Nigam discovered that HttpComponents Client could misinterpret malformed authority component in a request URI and pick the wrong target host for request execution (CVE-2020-13956). References: - https://bugs.mageia.org/show_bug.cgi?id=27389 - https://lists.debian.org/debian-security-announce/2020/msg00179.html - https://www.cve.org/CVERecord?id=CVE-2020-13956 SRPMS: - 7/core/httpcomponents-client-4.5.5-1.1.mga7 . MGASA-2021-0314 highlights a vulnerability in HttpComponents Client that impacts how requests are executed and which hosts are targeted.. HttpComponents Client Update,Mageia Security Advisory,Malformed URI Issue. . Severity: Critical. LinuxSecurity.com Team

Jul 06, 2021 •Critical Mageia