Skip to content
GitLab
Explore
Sign in
Register
Commits on Source (2)
Add fixed version for new curl CVEs
· 7d6222ea
Alessandro Ghedini
authored
Feb 06, 2019
7d6222ea
Reserve curl DSA
· c298d18e
Alessandro Ghedini
authored
Feb 06, 2019
c298d18e
Show whitespace changes
Inline
Side-by-side
data/CVE/list
View file @
c298d18e
...
...
@@ -8345,13 +8345,13 @@ CVE-2019-3824
RESERVED
CVE-2019-3823 [curl: SMTP end-of-response out-of-bounds read]
RESERVED
- curl
<unfixed>
- curl
7.64.0-1
NOTE: https://curl.haxx.se/docs/CVE-2019-3823.html
NOTE: Fixed by: https://github.com/curl/curl/commit/39df4073e5413fcdbb5a38da0c1ce6f1c0ceb484
NOTE: Introduced by: https://github.com/curl/curl/commit/2766262a68688c1dd8143f9c4be84b46c408b70a
CVE-2019-3822 [curl: NTLMv2 type-3 header stack buffer overflow]
RESERVED
- curl
<unfixed>
- curl
7.64.0-1
NOTE: https://curl.haxx.se/docs/CVE-2019-3822.html
NOTE: Fixed by: https://github.com/curl/curl/commit/50c9484278c63b958655a717844f0721263939cc
NOTE: Introduced by: https://github.com/curl/curl/commit/86724581b6c02d160b52f817550cfdfc9c93af62
...
...
@@ -25982,7 +25982,7 @@ CVE-2018-16891
RESERVED
CVE-2018-16890 [curl: NTLM type-2 out-of-bounds buffer read]
RESERVED
- curl
<unfixed>
- curl
7.64.0-1
NOTE: https://curl.haxx.se/docs/CVE-2018-16890.html
NOTE: Fixed by: https://github.com/curl/curl/commit/b780b30d1377adb10bbe774835f49e9b237fb9bb
NOTE: Introduced by: https://github.com/curl/curl/commit/86724581b6c02d160b52f817550cfdfc9c93af62
data/DSA/list
View file @
c298d18e
[06 Feb 2019] DSA-4386-1 curl - security update
{CVE-2018-16890 CVE-2019-3822 CVE-2019-3823}
[stretch] - curl 7.52.1-5+deb9u9
[05 Feb 2019] DSA-4385-1 dovecot - security update
{CVE-2019-3814}
[stretch] - dovecot 1:2.2.27-3+deb9u3
...
...
data/dsa-needed.txt
View file @
c298d18e
...
...
@@ -20,8 +20,6 @@ ansible
--
chromium
--
curl (ghedo)
--
faad2
not yet fixed upstream
--
...
...