MGASA-2019-0312

Source
https://advisories.mageia.org/MGASA-2019-0312.html
Import Source
https://advisories.mageia.org/MGASA-2019-0312.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2019-0312
Related
Published
2019-11-02T16:54:34Z
Modified
2019-11-02T16:36:44Z
Summary
Updated libsoup packages fix security vulnerability
Details

Updated libsoup package fixes security vulnerability:

It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to cause a denial of service (CVE-2019-17266).

References
Credits

Affected packages

Mageia:7 / libsoup

Package

Name
libsoup
Purl
pkg:rpm/mageia/libsoup?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.66.1-2.1.mga7

Ecosystem specific

{
    "section": "core"
}