Alpine/bison: medium 5.5
GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input,
Action: Upgrade bison to 3.7.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.2-r0 | - |
Fixed versions
| 3.7.2-r0 |
Sources
published · modified · JSON