ELA-388-1 zeromq3 security update

memory leak in client

2021-03-22
Packagezeromq3
Version4.0.5+dfsg-2+deb8u4
Related CVEs CVE-2021-20234


An issue has been found in zeromq3, a lightweight messaging kernel. When processing a delimiter in a pipe, that is not in an active state but still contains a message, this message is leaked.



For Debian 8 jessie, these problems have been fixed in version 4.0.5+dfsg-2+deb8u4.

We recommend that you upgrade your zeromq3 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.