Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-12490 →
ALPINE-CVE-2026-12490
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no cl...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.24
nsd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-r0"}]}]
Références
- advisory security.alpinelinux.org