libcurl vulnerability
-
Good Morning/Evening,
I just wanted to reach out and make sure we don't need to worry about the recently disclosed libcurl vulnerability CVE-2023-38545. This is a buffer overflow vulnerability in the socks5h proxy. The vulnerability has been patched in libcurl 8.4.0
Affected libcurl versions: 7.69.0 through 8.3.0
-
Hi
On most systems we don't link libcurl statically, so once you updated system packages - it's all good.
Windows build is bundled with our own instance of libcurl, and updated package will be released shortly.
-
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login