Mageia alert MGASA-2023-0114 (libmicrohttpd)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2023-0114: Updated libmicrohttpd packages fix security vulnerability
Date:
             
 
Fri, 24 Mar 2023 06:56:59 +0100
Message-ID:
             
 
<20230324055659.D10289FAB8@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2023-0114 - Updated libmicrohttpd packages fix security vulnerability

Publication date: 24 Mar 2023
URL: https://advisories.mageia.org/MGASA-2023-0114.html
Type: security
Affected Mageia releases: 8

Description:
In the MHD_PostProcessor, malformed inputs can be used to crash the server
(for denial-of-service).

References:
- https://bugs.mageia.org/show_bug.cgi?id=31670
- https://lists.gnu.org/archive/html/libmicrohttpd/2023-02/...

SRPMS:
- 8/core/libmicrohttpd-0.9.72-1.1.mga8