Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ebcbd75b by Salvatore Bonaccorso at 2021-05-29T17:19:00+02:00
Update information for CVE-2021-22897
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25570,12 +25570,11 @@ CVE-2021-22898 [TELNET stack contents disclosure]
NOTE: Fixed by:
https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
(7.77.0)
CVE-2021-22897 [schannel cipher selection surprise]
RESERVED
- - curl <unfixed>
- [buster] - curl <not-affected> (Vulnerable code introduced later)
- [stretch] - curl <not-affected> (Vulnerable code introduced later)
+ - curl <not-affected> (Windows only)
NOTE: https://curl.se/docs/CVE-2021-22897.html
NOTE: Introduced by:
https://github.com/curl/curl/commit/9aefbff30d280c60fc9d8cc3e0b2f19fc70a2f28
(7.61.0)
NOTE: Fixed by:
https://github.com/curl/curl/commit/bbb71507b7bab52002f9b1e0880bed6a32834511
(7.77.0)
+ NOTE: Only affect builds with schannel support (which is Windows only)
CVE-2021-22896
RESERVED
CVE-2021-22895
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebcbd75b89ad027f53094c7ba47515def802096c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebcbd75b89ad027f53094c7ba47515def802096c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
