[Git][security-tracker-team/security-tracker][master] Reserve DLA-3951-1 for curl
Abhijith PA (@abhijith)
abhijith at debian.org
Thu Nov 14 09:42:28 GMT 2024
Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5b9d6872 by Abhijith PA at 2024-11-14T15:12:06+05:30
Reserve DLA-3951-1 for curl
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -16975,7 +16975,6 @@ CVE-2024-1656 (Affected versions of Octopus Server had a weak content security p
CVE-2024-8096 (When curl is told to use the Certificate Status Request TLS extension, ...)
- curl 8.10.0-1
[bookworm] - curl 7.88.1-10+deb12u8
- [bullseye] - curl <postponed> (Minor issue)
NOTE: https://curl.se/docs/CVE-2024-8096.html
NOTE: Introduced with: https://github.com/curl/curl/commit/f13669a375f5bfd14797bda91642cabe076974fa (curl-7_41_0)
NOTE: Fixed by: https://github.com/curl/curl/commit/aeb1a281cab13c7ba791cb104e556b20e713941f (curl-8_10_0)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[14 Nov 2024] DLA-3951-1 curl - security update
+ {CVE-2024-8096}
+ [bullseye] - curl 7.74.0-1.3+deb11u14
[11 Nov 2024] DLA-3950-1 libarchive - security update
{CVE-2021-36976 CVE-2022-26280 CVE-2022-36227 CVE-2024-20696}
[bullseye] - libarchive 3.4.3-2+deb11u2
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b9d68727680c5b678d61b88bd3fb7beb894fb67
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b9d68727680c5b678d61b88bd3fb7beb894fb67
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241114/06660c51/attachment.htm>
More information about the debian-security-tracker-commits
mailing list