SUSE SLED15 / SLES15 Security Update : zeromq (SUSE-SU-2020:3264-1)

This update for zeromq fixes the following issues : CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 Fixed a memory leak in client induced by malicious servers without...

openSUSE Security Update : zeromq (openSUSE-2020-1910)

This update for zeromq fixes the following issues : - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

openSUSE Security Update : zeromq (openSUSE-2020-1907)

This update for zeromq fixes the following issues : - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

OPENSUSE-SU-2020:1910-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

Security update for zeromq (moderate)

openSUSE Security Update: Security update for zeromq Announcement ID: openSUSE-SU-2020:1910-1 Rating: moderate References: 1176116 1176256 1176257 1176258 1176259 Cross-References: CVE-2020-15166 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has four fixes is n...

OPENSUSE-SU-2020:1907-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

Security update for zeromq (moderate)

openSUSE Security Update: Security update for zeromq Announcement ID: openSUSE-SU-2020:1907-1 Rating: moderate References: 1176116 1176256 1176257 1176258 1176259 Cross-References: CVE-2020-15166 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has four fixes is n...

SUSE-SU-2020:3264-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

SUSE-SU-2020:3064-1 Security update for zeromq

This update for zeromq fixes the following issues: - Fixed a memory leak in client induced by malicious servers without CURVE/ZAP bsc1176257 - Fixed a stack overflow in PUB/XPUB subscription store bsc1176258...

[ASA-202009-15] lib32-zeromq: denial of service

Arch Linux Security Advisory ASA-202009-15 ========================================== Severity: High Date : 2020-09-26 CVE-ID : CVE-2020-15166 Package : lib32-zeromq Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1220 Summary ======= The package lib32-zeromq befor...

Fedora: Security Advisory for zeromq (FEDORA-2020-5460fcf6bd)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[ASA-202009-16] zeromq: denial of service

Arch Linux Security Advisory ASA-202009-16 ========================================== Severity: High Date : 2020-09-26 CVE-ID : CVE-2020-15166 Package : zeromq Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1219 Summary ======= The package zeromq before version...

[SECURITY] Fedora 33 Update: zeromq-4.3.3-1.fc33

The 0MQ lightweight messaging kernel is a library which extends the standard socket interfaces with features traditionally provided by specialized messaging middle-ware products. 0MQ sockets provide an abstraction of asynchronous message queues, multiple messaging patterns, message filtering...

Fedora 32 : zeromq (2020-08402f4071)

Fix for 1876738 and 1876689 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora: Security Advisory for zeromq (FEDORA-2020-08402f4071)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: zeromq-4.3.3-1.fc32

The 0MQ lightweight messaging kernel is a library which extends the standard socket interfaces with features traditionally provided by specialized messaging middle-ware products. 0MQ sockets provide an abstraction of asynchronous message queues, multiple messaging patterns, message filtering...

Photon OS 2.0: Zeromq PHSA-2020-2.0-0281

An update of the zeromq package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0281. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14066...

MGASA-2020-0367 Updated zeromq packages fix security vulnerability

If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them...

Updated zeromq packages fix security vulnerability

If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them...

GLSA-202009-12 : ZeroMQ: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-12 ZeroMQ: Denial of service It was discovered that ZeroMQ does not properly handle connecting peers before a handshake is completed. Impact : An unauthenticated remote attacker able to connect to a ZeroMQ endpoint, even wi...