Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 200d2df6 by Salvatore Bonaccorso at 2026-01-07T08:33:05+01:00 Add CVE-2025-13034/curl - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,10 @@ +CVE-2025-13034 [No QUIC certificate pinning with GnuTLS] + - curl <unfixed> + [bookworm] - curl <not-affected> (Vulnerable code introduced later) + [bullseye] - curl <not-affected> (Vulnerable code introduced later) + NOTE: https://curl.se/docs/CVE-2025-13034.html + NOTE: Introduced with: https://github.com/curl/curl/commit/3210101088dfa3d6a125d213226b092f2f866722 (curl-8_8_0) + NOTE: Fixed by: https://github.com/curl/curl/commit/3d91ca8cdb3b434226e743946d428b4dd3acf2c9 (curl-8_18_0) CVE-2026-0628 - chromium <unfixed> [bullseye] - chromium <end-of-life> (see #1061268) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/200d2df697554d89d5f4804ebdcfb28b07305586 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/200d2df697554d89d5f4804ebdcfb28b07305586 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
