Alpine/curl: high 7.5

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

Action: Upgrade curl to 7.66.0-r5 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-8231#Alpine:v3.9/curl
• https://security.alpinelinux.org/vuln/CVE-2020-8231

published 2020-12-14T20:15:13.590Z · modified 2026-09-11T10:17:51.450111999Z · JSON