Advisories » MGASA-2023-0070

Updated apache-commons-fileupload packages fix security vulnerability

Publication date: 27 Feb 2023
Modification date: 27 Feb 2023
Type: security
Affected Mageia releases : 8
CVE: CVE-2023-24998

Description

Denial of service with a malicious upload or series of uploads.
(CVE-2023-24998)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=31580
• https://www.openwall.com/lists/oss-security/2023/02/20/2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998

SRPMS

8/core

• apache-commons-fileupload-1.4-3.1.mga8