tocsin

Alpine/curl: high 7.5

A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memor

Action: Upgrade curl to 8.1.0-r0 or later.

Affected

introducedfixedlast affected
08.1.0-r0-

Fixed versions

8.1.0-r0

Sources

published · modified · JSON