[Git][security-tracker-team/security-tracker][master] CVE-2019-548{1,2}/curl fixed in unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aa536c11 by Salvatore Bonaccorso at 2019-09-15T20:12:24Z
CVE-2019-548{1,2}/curl fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31393,13 +31393,13 @@ CVE-2019-5483 (Seneca < 3.9.0 contains a vulnerability that could lead to exp
 CVE-2019-5482 [TFTP small blocksize heap buffer overflow]
 	RESERVED
 	{DLA-1917-1}
-	- curl <unfixed> (bug #940010)
+	- curl 7.66.0-1 (bug #940010)
 	NOTE: https://curl.haxx.se/docs/CVE-2019-5482.html
 	NOTE: Introduced by: https://github.com/curl/curl/commit/0516ce7786e9500c2e447d48aa9b3f24a6ca70f9
 	NOTE: Fixed by: https://github.com/curl/curl/commit/facb0e4662415b5f28163e853dc6742ac5fafb3d (curl-7_66_0)
 CVE-2019-5481 [FTP-KRB double-free]
 	RESERVED
-	- curl <unfixed> (bug #940009)
+	- curl 7.66.0-1 (bug #940009)
 	[jessie] - curl <not-affected> (Vulnerable code introduced later)
 	NOTE: https://curl.haxx.se/docs/CVE-2019-5481.html
 	NOTE: Introduced by: https://github.com/curl/curl/commit/0649433da53c7165f839e24e889e131e2894dd32 (curl-7_52_0)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/aa536c115ce3eaf31e666c44c797ee5e07726245

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/aa536c115ce3eaf31e666c44c797ee5e07726245
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190915/1d262365/attachment-0001.html>