You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2021/04/29 01:49:30 UTC

[GitHub] [apisix-docker] tao12345666333 opened a new pull request #166: fix: upgrade alpine version due to CVE-2020-28928

tao12345666333 opened a new pull request #166:
URL: https://github.com/apache/apisix-docker/pull/166


   musl	CVE-2020-28928	 	fixed in 1.2.2_pre2-r0	4	
   
   Published: >4 months agoIn musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
   
   
   
   
   xref: https://nvd.nist.gov/vuln/detail/CVE-2020-28928
   
   
   
   Signed-off-by: Jintao Zhang <zh...@gmail.com>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix-docker] starsz merged pull request #166: fix: upgrade alpine version due to CVE-2020-28928

Posted by GitBox <gi...@apache.org>.

starsz merged pull request #166:
URL: https://github.com/apache/apisix-docker/pull/166


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org