this post was submitted on 11 Oct 2023
11 points (100.0% liked)

@linux on Linux.Community

526 readers
8 users here now

Rules

This is an on-topic community. All content must adhere to our CODE OF CONDUCT.

founded 1 year ago
MODERATORS
[email protected]
11
Fresh curl tomorrow will patch 'worst' security flaw in ages | TheRegister (www.theregister.com)
submitted 1 year ago by [email protected] to c/[email protected]
1 comments fedilink hide all child comments
 

"Curl 8.4.0 will hit at around 0600 UTC (0800 CEST, 0700 BST, 0200 EST, 2300 PDT) on October 11 and deal with CVE-2023-38545, which affects both libcurl and the curl tool, and CVE-2023-38546, which only affects libcurl...."

top 1 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 1 year ago

It's a heap overflow: https://daniel.haxx.se/blog/2023/10/11/how-i-made-a-heap-overflow-in-curl/