tocsin

Alpine/croc: medium 4.7

An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments.

Action: Upgrade croc to 10.0.11-r0 or later.

Affected

introducedfixedlast affected
010.0.11-r0-

Fixed versions

10.0.11-r0

Sources

published · modified · JSON