{"id":"MGASA-2015-0003","aliases":[],"status":"published","title":"Updated privoxy package fixes security vulnerabilities","description":"Updated privoxy packages fix security issues:\n\nA memory leak occurred in privoxy 3.0.21 compiled with IPv6 support when \nrejecting client connections due to the socket limit being reached. \n(CID 66382)\n\nA use-after-free bug was found in privoxy 3.0.21 and two additional \npotential use-after-free issues were detected by Coverity scan. (CID 66394, \nCID 66376, CID 66391)\n\nAlso fixed is a file descriptor leak in an error path in jbsockets.c. \n(CID 66368)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-01-05T16:30:30Z","modified":"2026-04-16T04:28:47Z","fixes":[{"ecosystem":"Mageia:4","package":"privoxy","fixed_in":["3.0.21-2.2.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"privoxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.21-2.2.mga4"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2015-0003.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14892","tags":["report"]},{"url":"http://www.privoxy.org/announce.txt","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2015-0003","title":"Updated privoxy package fixes security vulnerabilities","description":"Updated privoxy packages fix security issues:\n\nA memory leak occurred in privoxy 3.0.21 compiled with IPv6 support when \nrejecting client connections due to the socket limit being reached. \n(CID 66382)\n\nA use-after-free bug was found in privoxy 3.0.21 and two additional \npotential use-after-free issues were detected by Coverity scan. (CID 66394, \nCID 66376, CID 66391)\n\nAlso fixed is a file descriptor leak in an error path in jbsockets.c. \n(CID 66368)\n","status":"published","published":"2015-01-05T16:30:30Z","modified":"2026-04-16T04:28:47.448541Z","updated_at":"2026-11-02T15:49:39.488462Z"}]}}