MGASA-2021-0159
Updated zeromq packages fix security vulnerabilities
Memory leak in client induced by malicious server without CURVE/ZAP (rhbz#1921972).
Stack overflow on server running PUB/XPUB socket (rhbz#1921976).
Heap overflow when receiving malformed ZMTP v1 packets (rhbz#1921983).
Memory leaks via metadata messages processed by PUB sockets (rhbz#1921989).
Also, the cppzmq package has been rebuilt to fix the broken dependency on zeromq-devel.
What each source reports
OSV No score
Updated zeromq packages fix security vulnerabilities
Memory leak in client induced by malicious server without CURVE/ZAP (rhbz#1921972).
Stack overflow on server running PUB/XPUB socket (rhbz#1921976).
Heap overflow when receiving malformed ZMTP v1 packets (rhbz#1921983).
Memory leaks via metadata messages processed by PUB sockets (rhbz#1921989).
Also, the cppzmq package has been rebuilt to fix the broken dependency on zeromq-devel.
- Record
MGASA-2021-0159- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2021-0159 is a vulnerability with no CVSS score yet in zeromq, published March 30, 2021. No source lists public exploit code. Fixed in zeromq 4.3.4-1.1.mga7.