[ GLSA 201903-22 ] ZeroMQ

[GLSA]

Gentoo Linux Security Advisory

Title: ZeroMQ: Code execution (GLSA 201903-22)
Severity: high
Exploitable: local, remote
Date: 2019-03-28
Bug(s): #675376
ID: 201903-22

Synopsis

An overflow was discovered in ZeroMQ which could lead to arbitrary
code execution.


Background

Looks like an embeddable networking library but acts like a concurrency
framework


Affected Packages

Package: net-libs/zeromq
Vulnerable: < 4.3.1
Unaffected: >= 4.3.1
Architectures: All supported architectures


Description

Please reference the CVE for details.

Impact

Please reference the CVE for details.

Workaround

There is no known workaround at this time.

Resolution

All ZeroMQ users should upgrade to the latest version: