Advisories ยป MGASA-2021-0040

Updated synergy packages fix a security vulnerability

Publication date: 17 Jan 2021
Type: security
Affected Mageia releases : 7
CVE: CVE-2020-15117


In Synergy before version 1.12.0, a Synergy server can be crashed by receiving
a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295)
if the servers memory is less than 4 GB. It was verified that this issue does
not cause a crash through the exception handler if the available memory of the
Server is more than 4GB (CVE-2020-15117).

The synergy package has been updated to version 1.12.0, fixing this issue and
several other bugs.