tocsin

Alpine/netatalk: high 7.5

Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c. The

Action: Upgrade netatalk to 3.1.19-r0 or later.

Affected

introducedfixedlast affected
2.0.03.1.19-r0-

Fixed versions

3.1.19-r0

Sources

published · modified · JSON