[Tails-dev] curl 8.4.0 - need to update

Nachricht löschen

Nachricht beantworten
Autor: David A. Wheeler
Datum:  
To: The Tails public development discussion list
Betreff: [Tails-dev] curl 8.4.0 - need to update
All:

curl 8.4.0 has been released. This fixes a high-severity vulnerability in curl's use of SOCKS5 (CVE-2023-38545), an important use case for Tails.

This is very unusual; it's very rare for find this kind of severe vulnerability in curl. Nevertheless, we're all human. Details here:
https://daniel.haxx.se/blog/2023/10/11/how-i-made-a-heap-overflow-in-curl/

--- David A. Wheeler