libmaxminddb-1.2.0-10.el8_9.1

エラータID: AXSA:2024-7509:01

Release date: 
Tuesday, February 13, 2024 - 13:41
Subject: 
libmaxminddb-1.2.0-10.el8_9.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The libmaxminddb package contains the MaxMind DB library.

Security Fix(es):

* libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

Solution: 

Update packages.

CVEs: 
CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.
Additional Info: 

N/A

Download: 

SRPMS
  1. libmaxminddb-1.2.0-10.el8_9.1.src.rpm
    MD5: a92118915b44681df6891e6f933989a6
    SHA-256: 4f4f968719c66ef9294154b46f5a85787dd8ceffe02a2bcf6074343ee84a83da
    Size: 650.28 kB

Asianux Server 8 for x86_64
  1. libmaxminddb-1.2.0-10.el8_9.1.i686.rpm
    MD5: 1b72a0f2d5ff5fb06941d49e64f7afb9
    SHA-256: 251d1af25dfa20cca40dc7a925c4b0d6f1dabf994fbf99c9e82c8c72a5391b85
    Size: 33.25 kB
  2. libmaxminddb-1.2.0-10.el8_9.1.x86_64.rpm
    MD5: 353c295e1b37bbca1a91939919740add
    SHA-256: b53fa841ac9fa05e7c5961a710b6f54ebc8c1b454cc324b2618e0db1ebf3b171
    Size: 32.29 kB
  3. libmaxminddb-devel-1.2.0-10.el8_9.1.i686.rpm
    MD5: f3fedcf3bd530f4a08a0e23789d2214f
    SHA-256: 7c829ede6ce8c1253891bc91f9924f810ea777e50980bf33f92e9f9bedb108f8
    Size: 28.03 kB
  4. libmaxminddb-devel-1.2.0-10.el8_9.1.x86_64.rpm
    MD5: 4bf77918534dcd13e41d9f5831d36c4a
    SHA-256: 7b89f617c2b97d649cc3783bc74c8913d014c7b773ae10bf2e5f6aa59991a71a
    Size: 28.00 kB