[ubuntu/noble-security] curl 8.5.0-2ubuntu10.11 (Accepted)

[Kyle Kernick]

curl (8.5.0-2ubuntu10.11) noble-security; urgency=medium

  * SECURITY UPDATE: Use after free in curl_easy_reset.
    - debian/patches/CVE-2026-10536.patch: Deprecate CURLOPT_STREAM_DEPENDS
      and CURLOPT_STREAM_DEPENDS_E and remove stream dependency tracking in
      include/curl/curl.h, lib/http2.c, ../setopt.c, ../url.c, and
      ../urldata.h
    - CVE-2026-10536
  * debian/patches/CVE-2026-5773.patch: Fix potential edge cases in fix. Thanks to Siddharth Doshi.

Date: 2026-07-07 16:06:20.929887+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/curl/8.5.0-2ubuntu10.11
-------------- next part --------------
Sorry, changesfile not available.