Summary
The libmaxminddb package contains the MaxMind DB library.
Security Fix(es):
* libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | libmaxminddb | 0:1.2.0-10.el8_9.1 |
Vulnerabilities 1
-
Unscored —
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1895379