Bug#1036300: Fwd: bullseye-pu: package curl/7.74.0-1.3+deb11u8

2023-06-25 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Fri, May 19, 2023 at 12:11:17AM +0100, Samuel Henrique wrote: > [ Reason ] > * Backport upstream patches to fix 5 CVEs: > - CVE-2023-27533: TELNET option IAC injection > - CVE-2023-27534: SFTP path ~ resolving discrepancy > - CVE-2023-27535: FTP too eager

Bug#1036300: Fwd: bullseye-pu: package curl/7.74.0-1.3+deb11u8

2023-05-18 Thread Samuel Henrique
Package: release.debian.org Control: affects -1 + src:curl X-Debbugs-Cc: c...@packages.debian.org User: release.debian@packages.debian.org Usertags: pu Tags: bullseye X-Debbugs-Cc: samuel...@debian.org Severity: normal [ Reason ] * Backport upstream patches to fix 5 CVEs: - CVE-2023-27533: