MGASA-2020-0452
- Source
- https://advisories.mageia.org/MGASA-2020-0452.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0452.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2020-0452
- Related
- Published
- 2020-12-08T10:40:32Z
- Modified
- 2020-12-08T09:54:26Z
- Summary
- Updated oniguruma packages fix security vulnerability
- Details
-
In Oniguruma, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concatoptexact_str in src/regcomp.c (CVE-2020-26159).
- References
-
- https://advisories.mageia.org/MGASA-2020-0452.html
- https://bugs.mageia.org/show_bug.cgi?id=27387
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZFUJY7BUIFBTZ3IUHVHCID4JYCRDGKPS/
- https://www.debian.org/lts/security/2020/dla-2431
- https://www.openwall.com/lists/oss-security/2020/09/30/7
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / oniguruma
Package
- Name
- oniguruma
- Purl
- pkg:rpm/mageia/oniguruma?distro=mageia-7