Alpine/apr: critical 9.8
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.
Action: Upgrade apr to 1.7.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.1-r0 | - |
Fixed versions
| 1.7.1-r0 |
Sources
published · modified · JSON