[ubuntu/focal-security] curl 7.68.0-1ubuntu2.6 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Thu Jul 22 18:07:55 UTC 2021
curl (7.68.0-1ubuntu2.6) focal-security; urgency=medium
* SECURITY UPDATE: TELNET stack contents disclosure
- debian/patches/CVE-2021-22898.patch: check sscanf() for correct
number of matches in lib/telnet.c.
- CVE-2021-22898
* SECURITY UPDATE: Bad connection reuse due to flawed path name checks
- debian/patches/CVE-2021-22924.patch: fix connection reuse checks for
issuer cert and case sensitivity in lib/url.c, lib/urldata.h,
lib/vtls/gtls.c, lib/vtls/nss.c, lib/vtls/openssl.c, lib/vtls/vtls.c.
- CVE-2021-22924
* SECURITY UPDATE: TELNET stack contents disclosure again
- debian/patches/CVE-2021-22925.patch: fix option parser to not send
uninitialized contents in lib/telnet.c.
- CVE-2021-22925
Date: 2021-07-21 15:10:09.688682+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/curl/7.68.0-1ubuntu2.6
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list