Package: curl Version: 7.88.1-10+deb12u6 Severity: important Hello Debian Team,
As curl version 7.88.1-10+deb12u6 is affected by CVE: https://security-tracker.debian.org/tracker/CVE-2024-2398: 8.6 The listed CVE got fixed in version >=8.7. Found that the updated version 8.8.0-1~bpo12+1 of package available in bookworm-backports: https://packages.debian.org/source/bookworm-backports/curl Kindly update curl and its library packages to 8.8.0-1 to fix the above listed vulnerability. Let us know if any help is needed from my side for migrating the package from backports to stable Bookworm release. Thanks & Regards, Badrikesh