Bug 11196

Summary: Updated gssproxy package fixes a security vulnerability (CVE-2020-12658)
Product: [ROSA-based products] ROSA Fresh Reporter: Zombie Ryushu <zombie.ryushu>
Component: Packages from MainAssignee: ROSA Linux Bugs <bugs>
Status: CONFIRMED --- QA Contact: ROSA Linux Bugs <bugs>
Severity: normal    
Priority: Normal CC: andrey.bondrov, m.novosyolov, mc2374
Version: KDE4   
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: https://advisories.mageia.org/MGASA-2021-0081.html
Whiteboard:
Platform: 2016.1 ROSA Vulnerability identifier: CVE-2020-12658
RPM Package: gssproxy-0.8.2-2.1.mga7 ISO-related:
Bad POT generating: Upstream:

Description Zombie Ryushu 2021-02-16 13:16:49 MSK
gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before
pthread exit in gp_worker_main() in gp_workers.c (CVE-2020-12658).