tocsin

Alpine/kea: high 7.8

Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control

Action: Upgrade kea to 2.6.3-r0 or later.

Affected

introducedfixedlast affected
02.6.3-r0-

Fixed versions

2.6.3-r0

Sources

published · modified · JSON