VDB
MAGEIA-2020-118
MAGEIA-2020-118
PUBLISHED
The updated packages fix a security vulnerability: GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. (CVE-2020-6750)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mageia | mesa | 0, 20.0.6-1.mga7 |
| Mageia | glib2.0 | 0, 2.60.2-1.3.mga7, 2.60.2-1.3.mga7 |
Timeline
- Mar 6, 2020 CVE Updated
- Mar 6, 2020 CVE Published
References
- Updated glib2.0 packages fix security vulnerability advisory
- Updated glib2.0 packages fix security vulnerability issue
- Updated glib2.0 packages fix security vulnerability issue
- Updated glib2.0 packages fix security vulnerability issue
- mesa 20.0.6 maintenance release advisory
- mesa 20.0.6 maintenance release issue
- mesa 20.0.6 maintenance release issue
- mesa 20.0.6 maintenance release issue