Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2024-27082 commit #5798

Closed
bastien-roucaries opened this issue Aug 11, 2024 · 3 comments
Closed

CVE-2024-27082 commit #5798

bastien-roucaries opened this issue Aug 11, 2024 · 3 comments
Labels
support Support related issue

Comments

@bastien-roucaries
Copy link

Hi,

Can you give me the commit fixing this CVE ?

Thanks

rouca
@bastien-roucaries bastien-roucaries added bug Undesired behaviour unverified Some days we don't have a clue labels Aug 11, 2024
@TheWitness TheWitness added support Support related issue and removed bug Undesired behaviour unverified Some days we don't have a clue labels Aug 18, 2024
@TheWitness
Copy link
Member

You can simply upgrade to 1.2.27. It's a stable release. Was there some other reason?

@bastien-roucaries
Copy link
Author

we want to be sure the bug is closed and that we could not reproduce. And at debian we try also backport

@TheWitness
Copy link
Member

There were a few commits for this. We started with one framework, but at the recommendation of the reporter, we switched to another framework:

58a980f
73d9a60
593ca99
59e39b3
9c75f8d
6a82fa1

Yea, quite messy, but you can dig through them and pull it all together I think.

@TheWitness TheWitness mentioned this issue Nov 8, 2024
Open
@github-actions github-actions bot locked and limited conversation to collaborators Nov 24, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
support Support related issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@TheWitness @bastien-roucaries