Summary
The libmaxminddb package contains the MaxMind DB library.
Security Fix(es):
* libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libmaxminddb | 1.2.0-10.el8_9.1 |
| AlmaLinux · 8 | libmaxminddb-devel | 1.2.0-10.el8_9.1 |
Vulnerabilities 1
-
Unscored —
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.