Skip to content

3.19.1

Choose a tag to compare

View all tags
@tinyboxvk tinyboxvk released this 25 Jul 21:55
· 199 commits to master since this release
3.19.1
2e08df7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

3.19.1 (2025-07-25, 32f9f19)

  • Notable user-visible changes

    • SECURITY NOTE: Thanks to Han Lee with Apple Information Security
      for finding and reporting several memory errors
      including a buffer overflow within the
      --skip-rx-copy option, and two memory errors
      within authentication, including a heap overflow
      in the plaintext password and an assert.

    • An off-by-one heap overflow has been fixed in authentication.
      (CVE-2025-54349, ESNET-SECADV-2025-0003)

    • An assert in authentication has been removed. (CVE-2025-54350,
      ESNET-SECADV-2025-0002)

    • A buffer overflow in the --skip-rx-copy option for zerocopy
      has been fixed. (CVE-2025-54351, ESNET-SECADV-2025-0001)

Assets 3
Loading