Updated znc package fixes security vulnerabilities
Publication date: 05 Nov 2026Modification date: 05 Nov 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2020-11022 , CVE-2026-82373 , CVE-2026-82374
Description
Updated the old bundled vulnerable version of jQuery to 3.5.1.
(CVE-2020-11022)
Use-after-free when unloading modules, triggered by unprivileged users.
(CVE-2026-82373)
Null pointer dereference in crypt module, triggered by IRC server.
(CVE-2026-82374)
References
- https://bugs.mageia.org/show_bug.cgi?id=36333
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/43LPDUREWN6TG2MXJYUQPY2QK3CRKWAD/
- https://wiki.znc.in/ChangeLog/1.10.3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3I6VFAWFKIZEOR37U3K7TA7GJVMFAULQ/
- https://www.cve.org/CVERecord?id=CVE-2020-11022
- https://www.cve.org/CVERecord?id=CVE-2026-82373
- https://www.cve.org/CVERecord?id=CVE-2026-82374
SRPMS
10/core
- znc-1.10.3-1.mga10