Alpine/apr-util: high 7.5
APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timin
Action: Upgrade apr-util to 1.6.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.6.4-r0 | - |
Fixed versions
| 1.6.4-r0 |
Sources
published · modified · JSON