Summary: | <net-misc/curl-8.3.0: denial of service via large memory consumption | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Sam James <sam> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | base-system, kangie |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://curl.se/docs/CVE-2023-38039.html | ||
Whiteboard: | B3 [glsa+] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 915509 | ||
Bug Blocks: |
Description
Sam James
2023-09-13 06:38:25 UTC
commit 448256fcebbab16fbaa3bb51ad04259f39a1ae06 Author: Matt Jolly <Matt.Jolly@footclan.ninja> Date: Thu Sep 14 09:39:18 2023 +1000 net-misc/curl: add 8.3.0 Signed-off-by: Matt Jolly <Matt.Jolly@footclan.ninja> Closes: https://github.com/gentoo/gentoo/pull/32767 Signed-off-by: Sam James <sam@gentoo.org> The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/data/glsa.git/commit/?id=3dfe02046c2bc76fb7e910a04702603b72fcb98c commit 3dfe02046c2bc76fb7e910a04702603b72fcb98c Author: GLSAMaker <glsamaker@gentoo.org> AuthorDate: 2023-10-11 08:40:59 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2023-10-11 08:41:24 +0000 [ GLSA 202310-12 ] curl: Multiple Vulnerabilities Bug: https://bugs.gentoo.org/887745 Bug: https://bugs.gentoo.org/894676 Bug: https://bugs.gentoo.org/902801 Bug: https://bugs.gentoo.org/906590 Bug: https://bugs.gentoo.org/910564 Bug: https://bugs.gentoo.org/914091 Bug: https://bugs.gentoo.org/915195 Signed-off-by: GLSAMaker <glsamaker@gentoo.org> Signed-off-by: Sam James <sam@gentoo.org> glsa-202310-12.xml | 68 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 68 insertions(+) The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c22372a61dd61966e9d8438d2cd64ba847a9be20 commit c22372a61dd61966e9d8438d2cd64ba847a9be20 Author: Sam James <sam@gentoo.org> AuthorDate: 2023-11-25 05:09:19 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2023-11-25 05:09:26 +0000 net-misc/curl: drop 8.2.1, 8.3.0, 8.3.0-r1 Bug: https://bugs.gentoo.org/914091 Bug: https://bugs.gentoo.org/915195 Signed-off-by: Sam James <sam@gentoo.org> net-misc/curl/Manifest | 2 - net-misc/curl/curl-8.2.1.ebuild | 361 ------------------------------------- net-misc/curl/curl-8.3.0-r1.ebuild | 361 ------------------------------------- net-misc/curl/curl-8.3.0.ebuild | 360 ------------------------------------ net-misc/curl/metadata.xml | 1 - 5 files changed, 1085 deletions(-) All done! |