https://bugs.documentfoundation.org/show_bug.cgi?id=154224

--- Comment #5 from László Németh <nem...@numbertext.org> ---
(In reply to Michael Stahl (allotropia) from comment #4)
> from my understanding CVE-2023-23916 was just a DoS problem so not so
> severe, likely reverting that upgrade in your builds shouldn't cause
> problems.

Thanks, Michael! In that case I suggest to revert the curl upgrade in 7.4,
because that upgrade was committed at the end of the line of 7.4 in a bug fix
release, resulting severe problems for the users of a stable release. We are
going to test the next upcoming curl update in LO 7.5 and master, and report
the results, hoping that will solve this issue there, too.

The suggested fix: https://gerrit.libreoffice.org/c/core/+/149141

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to