Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 27298ada by Salvatore Bonaccorso at 2022-04-27T09:03:32+02:00 Update information for CVE-2022-2777{4,5,6}/curl - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -5682,17 +5682,21 @@ CVE-2022-27776 [Auth/cookie leak on redirect] RESERVED - curl <unfixed> NOTE: https://curl.se/docs/CVE-2022-27776.html - TODO: check + NOTE: Fixed by: https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258 (curl-7_83_0) CVE-2022-27775 [Bad local IPv6 connection reuse] RESERVED - curl <unfixed> + [buster] - curl <not-affected> (Vulnerable code introduced later) + [stretch] - curl <not-affected> (Vulnerable code introduced later) NOTE: https://curl.se/docs/CVE-2022-27775.html - TODO: check + NOTE: Introduced by: https://github.com/curl/curl/commit/2d0e9b40d3237b1450cbbfbcb996da244d964898 (curl-7_65_0) + NOTE: Fixed by: https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705 (curl-7_83_0) CVE-2022-27774 [Credential leak on redirect] RESERVED - curl <unfixed> NOTE: https://curl.se/docs/CVE-2022-27774.html - TODO: check + NOTE: Fixed by: https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79 (curl-7_83_0) + NOTE: Followup: https://github.com/curl/curl/commit/139a54ed0a172adaaf1a78d6f4fff50b2c3f9e08 (curl-7_83_0) CVE-2022-27773 RESERVED CVE-2022-27772 (** UNSUPPORTED WHEN ASSIGNED ** spring-boot versions prior to version ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27298ada3ace3d7cdd14d8d0cebf7801f489f7d9 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27298ada3ace3d7cdd14d8d0cebf7801f489f7d9 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits