Alpine/rclone: high 7.5
go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash an
Action: Upgrade rclone to 1.74.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.74.0-r0 | - |
Fixed versions
| 1.74.0-r0 |
Sources
published · modified · JSON