[Git][security-tracker-team/security-tracker][master] Add blog reference for CVE-2026-92392

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Oct 14 09:46:10 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
17a9675a by Salvatore Bonaccorso at 2026-10-14T10:45:46+02:00
Add blog reference for CVE-2026-92392

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3580,6 +3580,7 @@ CVE-2026-92392
 	NOTE: https://curl.se/docs/CVE-2026-92392.html
 	NOTE: Introduced with: https://github.com/curl/curl/commit/cd9107e0128191b7b5396b9eb81bbd20c2d36755 (curl-8_12_0)
 	NOTE: Fixed by: https://github.com/curl/curl/commit/8b0744af5b1b631da5b938ca31c3f9895ad5a321 (curl-8_23_0)
+	NOTE: https://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/
 CVE-2026-86410
 	- curl 8.23.0~rc1-1
 	[trixie] - curl <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/17a9675a8b5a4df92870e9068f0840dcd4403afb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/17a9675a8b5a4df92870e9068f0840dcd4403afb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/0fbea70a/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list