Debian has issued an advisory on December 15: https://www.debian.org/security/2020/dsa-4811 The issue is fixed upstream in 1.4.14. Mageia 7 is also affected.
Whiteboard: (none) => MGA7TOO
fixed in cauldron
CC: (none) => mageiaWhiteboard: MGA7TOO => (none)Version: Cauldron => 7
Status comment: (none) => Fixed upstream in 1.4.14, patch available from Debian
CC: (none) => zombie_ryushuURL: (none) => https://nvd.nist.gov/vuln/detail/CVE-2020-26259CVE: (none) => CVE-2020-26259
Version: 7 => CauldronWhiteboard: (none) => MGA7TOO
CVE: CVE-2020-26259 => (none)URL: https://nvd.nist.gov/vuln/detail/CVE-2020-26259 => (none)Whiteboard: MGA7TOO => (none)Version: Cauldron => 7
Depends on: (none) => 27980
RedHat has issued an advisory for this today (January 18): https://access.redhat.com/errata/RHSA-2021:0162
openSUSE has issued an advisory for this on January 22: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CTO6QRFLVKVHOYBP6VLJP4KZXZFZSKET/
https://blog.mageia.org/en/2021/06/08/mageia-7-will-reach-end-of-support-on-30th-of-june-the-king-is-dead-long-live-the-king/
Status: NEW => RESOLVEDResolution: (none) => OLD