Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
created 1 month, 3 weeks ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion
SASL double-free

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

References

Affected products

curl
  • =<8.18.0
  • =<8.15.0
  • =<8.19.0
  • =<8.16.0
  • =<8.17.0
  • =<8.20.0