this post was submitted on 11 Oct 2023
11 points (100.0% liked)

@linux on Linux.Community

490 readers
1 users here now

Rules

This is an on-topic community. All content must adhere to our CODE OF CONDUCT.

founded 1 year ago
MODERATORS
nkukard@linux.community
11
Fresh curl tomorrow will patch 'worst' security flaw in ages | TheRegister (www.theregister.com)
submitted 1 year ago by nkukard@linux.community to c/linux@linux.community
1 comments fedilink hide all child comments
 

"Curl 8.4.0 will hit at around 0600 UTC (0800 CEST, 0700 BST, 0200 EST, 2300 PDT) on October 11 and deal with CVE-2023-38545, which affects both libcurl and the curl tool, and CVE-2023-38546, which only affects libcurl...."

you are viewing a single comment's thread
view the rest of the comments
[–] charonn0@startrek.website 1 points 1 year ago

It's a heap overflow: https://daniel.haxx.se/blog/2023/10/11/how-i-made-a-heap-overflow-in-curl/