Skip to content

[GHSA-2w4p-2hf7-gh8x] us.springett:alpine: the fix is already in 1.10.3 - #9798

Open
zyl71 wants to merge 1 commit into
github:zyl71/advisory-improvement-9798from
zyl71:fix/GHSA-2w4p-2hf7-gh8x
Open

zyl71 wants to merge 1 commit into
github:zyl71/advisory-improvement-9798from
zyl71:fix/GHSA-2w4p-2hf7-gh8x

Conversation

@zyl71

@zyl71 zyl71 commented Sep 26, 2026

Copy link
Copy Markdown

Updates

  • Affected products

Comments
The referenced fix commit a7432184b9137ea095799a77f9ced370553acbd7 (stevespringett/Alpine@a743218, 2022-01-12), which normalizes the request URI and rejects .. in the Blacklist/Whitelist URL filters, is already in alpine 1.10.3 (released 2022-01-14): the 1.10.3 sources contain the change, and the compiled filter classes of 1.10.3 and 1.10.4 are identical. This change sets the patched version to 1.10.3.

@github-actions
github-actions Bot changed the base branch from main to zyl71/advisory-improvement-9798 September 26, 2026 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant