[Git][security-tracker-team/security-tracker][master] Add first batch of new curl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
83ce4015 by Salvatore Bonaccorso at 2026-10-14T08:38:25+02:00
Add first batch of new curl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4,6 +4,44 @@ CVE-2026-92392
 	NOTE: https://curl.se/docs/CVE-2026-92392.html
 	NOTE: Introduced with: https://github.com/curl/curl/commit/cd9107e0128191b7b5396b9eb81bbd20c2d36755 (curl-8_12_0)
 	NOTE: Fixed by: https://github.com/curl/curl/commit/8b0744af5b1b631da5b938ca31c3f9895ad5a321 (curl-8_23_0)
+CVE-2026-87863
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <no-dsa> (Minor issue)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2026-87863.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/0c667188e0c6cda615a036b8a2b4125f2c404dde (curl-8_2_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/08d50a791b3197a3d0a4fc2f778e243f5501c67e (rc-8_23_0-1)
+CVE-2026-87865
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <no-dsa> (Minor issue)
+	NOTE: https://curl.se/docs/CVE-2026-87865.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/e96fe70cabcb3a5a009821dbb453dc0160ddc3f5 (curl-7_69_1)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/323c184b6bdf5b1988a10c0a61560666e1588149 (rc-8_23_0-1)
+CVE-2026-87866
+	- curl 8.23.0~rc1-1 (unimportant)
+	NOTE: https://curl.se/docs/CVE-2026-87866.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/0675abbc7572ff6d711a1f325d9b812f98bce78f (curl-7_43_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/ed131747c1a3dc7f816d26724c44537ac8acba44 (rc-8_23_0-1)
+	NOTE: curl in Debian not built with wolfSSL support
+CVE-2026-86409
+	- curl 8.22.0-1
+	[trixie] - curl <no-dsa> (Minor issue)
+	NOTE: https://curl.se/docs/CVE-2026-86409.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/08e8455dddc5e48e58a12ade3815c01ae3da3b64 (curl-7_75_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/c3c70440e8d9938c0bb732595751e8aebc614f24 (curl-8_22_0)
+CVE-2026-86411
+	- curl 8.22.0-1
+	[trixie] - curl <not-affected> (Vulnerable code not present)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2026-86411.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/4ff212f8ed328fb95261e11add8f4d2f0616895a (curl-8_21_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/72352daba01ba8072b6c1c0254cb77860ed1ab06 (curl-8_22_0)
+CVE-2026-87864
+	- curl 8.22.0-1
+	[trixie] - curl <no-dsa> (Minor issue)
+	NOTE: https://curl.se/docs/CVE-2026-87864.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/f8c8c76d39ac2fa825481ba42ab2247cd122f963 (curl-7_30_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/3b547de301342b347fb3c6ea6ae7979070793a66 (curl-8_22_0)
 CVE-2026-110152
 	- chromium <unfixed>
 CVE-2026-110149



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ce40157119b964e29019068b149c3512a41c24

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ce40157119b964e29019068b149c3512a41c24
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/69566f45/attachment-0001.htm>