Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0a66da9c by Salvatore Bonaccorso at 2022-10-26T16:52:17+02:00
Add CVE-2022-35260/curl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21883,8 +21883,14 @@ CVE-2022-35262 (A denial of service vulnerability
exists in the web_server hashF
TODO: check
CVE-2022-35261 (A denial of service vulnerability exists in the web_server
hashFirst f ...)
TODO: check
-CVE-2022-35260
+CVE-2022-35260 [.netrc parser out-of-bounds access]
RESERVED
+ - curl <unfixed>
+ [bullseye] - curl <not-affected> (Vulnerable code not present)
+ [buster] - curl <not-affected> (Vulnerable code not present)
+ NOTE: https://curl.se/docs/CVE-2022-35260.html
+ NOTE: introduced by:
https://github.com/curl/curl/commit/eeaae10c0fb27aa066fdc296074edeacfdeb6522
(curl-7_84_0)
+ NOTE: Fixed by:
https://github.com/curl/curl/commit/c97ec984fb2bc919a3aa863e0476dffa377b184c
(curl-7_86_0)
CVE-2022-35259
RESERVED
CVE-2022-35258
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a66da9c983616174a09a020b5cab46110ff0be4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a66da9c983616174a09a020b5cab46110ff0be4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
