[Git][security-tracker-team/security-tracker][master] 2 commits: Track fixed version for CVE-2026-92392 in unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
345066bc by Salvatore Bonaccorso at 2026-10-14T08:39:31+02:00
Track fixed version for CVE-2026-92392 in unstable

- - - - -
20a6b168 by Salvatore Bonaccorso at 2026-10-14T08:54:14+02:00
Add second batch of curl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,55 @@
 CVE-2026-92392
-	- curl <unfixed>
+	- curl 8.23.0-1
 	[bookworm] - curl <not-affected> (Vulnerable code not present)
 	NOTE: https://curl.se/docs/CVE-2026-92392.html
 	NOTE: Introduced with: https://github.com/curl/curl/commit/cd9107e0128191b7b5396b9eb81bbd20c2d36755 (curl-8_12_0)
 	NOTE: Fixed by: https://github.com/curl/curl/commit/8b0744af5b1b631da5b938ca31c3f9895ad5a321 (curl-8_23_0)
+CVE-2026-86410
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <no-dsa> (Minor issue)
+	NOTE: https://curl.se/docs/CVE-2026-86410.html
+	NOTE: Fixed by: https://github.com/curl/curl/commit/6ae9befb2fb6bdfdb5fc11fdf76bbe519fe1f52c (rc-8_23_0-1)
+CVE-2026-86412
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <not-affected> (Vulnerable code not present)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2026-86412.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/3f0629ca443825916cbc0795bcd5f241fbf7104c (curl-8_18_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/6ded3e594455d6f018fab5f2f5d916eb9bc4ef94 (rc-8_23_0-1)
+CVE-2026-86413
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <not-affected> (Vulnerable code not present)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2026-86413.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/8f71d0fde515aa4c68002477 (curl-8_21_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/43029e2ec37eba2354ced199ccd8898de695858e (rc-8_23_0-1)
+CVE-2026-86414
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <no-dsa> (Minor issue)
+	NOTE: https://curl.se/docs/CVE-2026-86414.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/52ceab5e41a01b4d1227876d51a3680a3ce5a841 (curl-7_10_8)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/2956af6c7451029fb12c12f8166dff211f930d52 (rc-8_23_0-1)
+CVE-2026-86415
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <not-affected> (Vulnerable code not present)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2026-86415.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/d69bfad3fa3daf5e72331f6870667607828d5891 (curl-8_21_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/00271cfcb95b6481a1f91ce0a0dad5d64d2e89a9 (rc-8_23_0-1)
+CVE-2026-87861
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <not-affected> (Vulnerable code not present)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2026-87861.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/bd10924b47c8bf94127eaee8c56e7b5e5418da46 (curl-8_21_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/7c11f1a1bd53e2cd983fe153e45991302d097647 (rc-8_23_0-1)
+CVE-2026-87862
+	- curl 8.23.0~rc1-1
+	[trixie] - curl <no-dsa> (Minor issue)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2026-87862.html
+	NOTE: Introduced with: https://github.com/curl/curl/commit/a94973805df96269bf3f3bf0a20ccb9887313316 (curl-8_11_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/a1614c3bcf1593eb524b37792124357d97a5429c (rc-8_23_0-1)
 CVE-2026-87863
 	- curl 8.23.0~rc1-1
 	[trixie] - curl <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/83ce40157119b964e29019068b149c3512a41c24...20a6b1689a8716130ac264038b3cfa61f6538d87

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/83ce40157119b964e29019068b149c3512a41c24...20a6b1689a8716130ac264038b3cfa61f6538d87
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/5344c081/attachment.htm>