Please update curl version to >=8.7 in the stable Bookworm release, due to CVE-2024-2398

["Prusty, Badrikesh" <badrikesh.prusty@siemens.com>]

Package: curl

Version: 7.88.1-10+deb12u6

Severity: important

 

Hello Debian Team,

 

As curl version 7.88.1-10+deb12u6 is affected by CVE:

https://security-tracker.debian.org/tracker/CVE-2024-2398: 8.6

 

The listed CVE got fixed in version >=8.7.

Found that the updated version 8.8.0-1~bpo12+1 of package available in bookworm-backports:

https://packages.debian.org/source/bookworm-backports/curl

 

Kindly update curl and its library packages to 8.8.0-1 to fix the above listed vulnerability.

 

Let us know if any help is needed from my side for migrating the package from backports to stable Bookworm release.

 

 

Thanks & Regards,

Badrikesh