Package: curl
Version: 7.88.1-10+deb12u6
Severity: important

Hello Debian Team,

As curl version 7.88.1-10+deb12u6 is affected by CVE:
https://security-tracker.debian.org/tracker/CVE-2024-2398: 8.6

The listed CVE got fixed in version >=8.7.
Found that the updated version 8.8.0-1~bpo12+1 of package available in 
bookworm-backports:
https://packages.debian.org/source/bookworm-backports/curl

Kindly update curl and its library packages to 8.8.0-1 to fix the above listed 
vulnerability.

Let us know if any help is needed from my side for migrating the package from 
backports to stable Bookworm release.


Thanks & Regards,
Badrikesh

Reply via email to