Search for packages
| purl | pkg:conan/glib@2.62.4 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zyf2-q3u4-aaae
Aliases: CVE-2020-6750 |
GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. |
Affected by 4 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:48:06.678324+00:00 | GitLab Importer | Affected by | VCID-zyf2-q3u4-aaae | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/glib/CVE-2020-6750.yml | 34.0.1 |
| 2024-01-03T18:09:11.028797+00:00 | GitLab Importer | Affected by | VCID-zyf2-q3u4-aaae | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/glib/CVE-2020-6750.yml | 34.0.0rc1 |