tocsin

Alpine/go: high 7.5

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying

Action: Upgrade go to 1.26.9-r0 or later.

Affected

introducedfixedlast affected
01.26.9-r0-

Fixed versions

1.26.9-r0

Sources

published · modified · JSON