blob: 13907fe000e060a26f59d0ba10f9e05d5d6504d6 [file] [log] [blame]
module: github.com/proglottis/gpgme
versions:
- fixed: v0.1.1
description: |
Due to improper setting of finalizers, memory passed to C may be freed before it is used,
leading to crashes due to memory corruption or possible code execution.
published: 2021-04-14T20:04:52Z
cves:
- CVE-2020-8945
ghsas:
- GHSA-m6wg-2mwg-4rfq
credit: Ulrich Obergfell
links:
pr: https://github.com/proglottis/gpgme/pull/23
commit: https://github.com/proglottis/gpgme/commit/92153bcb59bd2f511e502262c46c7bd660e21733