{"id":"CVE-2024-7264","aliases":["ALPINE-CVE-2024-7264","ALSA-2025:1671","ALSA-2025:1673","AZL-47253","AZL-47282","BELL-CVE-2024-7264","CLSA-2024-1726313254","CLSA-2024-1726773445","CLSA-2025-1740823577","CLSA-2025-1740824456","CLSA-2025-1741074282","CLSA-2025-1741637440","CLSA-2025-1750784906","CLSA-2025-1750785256","CLSA-2025-1751135005","CLSA-2026-1776599416","CLSA-2026-1776601980","CURL-CVE-2024-7264","DEBIAN-CVE-2024-7264","EUVD-2024-48211","GHSA-97c4-2w4v-c7r8","JLSEC-2025-38","RHSA-2025:1671","RHSA-2025:1673","RLSA-2025:1671","RLSA-2025:1673","SUSE-SU-2024:2784-1","SUSE-SU-2024:2930-1","SUSE-SU-2024:2938-1","SUSE-SU-2024:3080-1","SUSE-SU-2024:3080-2","SUSE-SU-2024:3202-1","SUSE-SU-2025:20029-1","UBUNTU-CVE-2024-7264","USN-6944-1","USN-6944-2","openSUSE-SU-2024:14261-1"],"status":"published","title":"ASN.1 date parser overread","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.20217,"percentile":0.97483,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2024-07-31T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"rust","fixed_in":["1.68.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cmake","fixed_in":["3.30.3-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"curl","fixed_in":["8.9.1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"curl","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl3","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl3-gnutls","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl3-nss","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-doc","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-gnutls-dev","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-nss-dev","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-openssl-dev","fixed_in":["7.47.0-1ubuntu2.23+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"curl","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl3-gnutls","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl3-nss","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-doc","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-gnutls-dev","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-nss-dev","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-openssl-dev","fixed_in":["7.58.0-2ubuntu3.24+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"curl","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"curl-minimal","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libcurl","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libcurl-devel","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libcurl-minimal","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"curl","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"curl-minimal","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libcurl","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libcurl-devel","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libcurl-minimal","fixed_in":["7.61.1-22.el8.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"curl","fixed_in":["7.61.1-34.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"curl-minimal","fixed_in":["7.61.1-34.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl","fixed_in":["7.61.1-34.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl-devel","fixed_in":["7.61.1-34.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl-minimal","fixed_in":["7.61.1-34.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"curl","fixed_in":["7.76.1-31.el9_2.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"curl-minimal","fixed_in":["7.76.1-31.el9_2.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl","fixed_in":["7.76.1-31.el9_2.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl-devel","fixed_in":["7.76.1-31.el9_2.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl-minimal","fixed_in":["7.76.1-31.el9_2.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"curl","fixed_in":["7.76.1-31.el9_6.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"curl-minimal","fixed_in":["7.76.1-31.el9_6.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl","fixed_in":["7.76.1-31.el9_6.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl-devel","fixed_in":["7.76.1-31.el9_6.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl-minimal","fixed_in":["7.76.1-31.el9_6.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"curl","fixed_in":["7.88.1-10+deb12u7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"curl","fixed_in":["8.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"curl","fixed_in":["8.9.1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"CURL_jll","fixed_in":["8.9.1+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibCURL_jll","fixed_in":["8.9.1+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"curl","fixed_in":["7.66.0-150200.4.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"curl","fixed_in":["7.66.0-150200.4.75.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"curl","fixed_in":["8.0.1-11.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"curl","fixed_in":["8.0.1-11.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"curl","fixed_in":["8.0.1-11.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP4","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP5","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.5","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"curl","fixed_in":["8.0.1-150400.5.47.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"curl","fixed_in":["7.35.0-1ubuntu2.20+esm18"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"curl","fixed_in":["7.47.0-1ubuntu2.19+esm13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"curl","fixed_in":["7.58.0-2ubuntu3.24+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"curl","fixed_in":["7.68.0-1ubuntu2.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"curl","fixed_in":["7.81.0-1ubuntu1.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"curl","fixed_in":["8.5.0-2ubuntu10.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"curl","fixed_in":["8.9.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-2.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-2.module_el8.6.0+3340+d764b636"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-2.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-2.module_el8.6.0+3340+d764b636"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab-ipadic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-17.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab-ipadic-EUCJP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-17.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.10.0+3965+b415b607"}]}],"bundled":49},{"source":"osv","ecosystem":"Azure Linux:2","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.68.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cmake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.3-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.0-r2"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.2-r0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.2-r0"},{"fixed":"8.9.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl3-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-gnutls-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-nss-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcurl4-openssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.23+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl3-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-gnutls-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-nss-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-openssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1"}]}],"bundled":49},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.el9_2.tuxcare.els1"}]}],"bundled":23},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.el9_2.tuxcare.els1"}]}],"bundled":23},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.el9_2.tuxcare.els1"}]}],"bundled":23},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.el9_2.tuxcare.els1"}]}],"bundled":23},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.el9_2.tuxcare.els1"}]}],"bundled":23},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.el9_2.tuxcare.els1"}]}],"bundled":23},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.41-1.el9_2.tuxcare.els1"}]}],"bundled":23},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.88.1-10+deb12u7"}]}],"versions":["7.88.1-10","7.88.1-10+deb12u1","7.88.1-10+deb12u1~bpo11+1","7.88.1-10+deb12u2","7.88.1-10+deb12u3","7.88.1-10+deb12u3~bpo11+1","7.88.1-10+deb12u4","7.88.1-10+deb12u5","7.88.1-10+deb12u5~bpo11+1","7.88.1-10+deb12u6","7.88.1-10+deb12u6~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"CURL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.9.1+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"LibCURL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.9.1+0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-ipadic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-ipadic-EUCJP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+22857+7f331edd"}]}],"bundled":49},{"source":"osv","ecosystem":"Rocky Linux:9","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-2.el9_5"}]}],"bundled":49},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.10.0+1676+9b4b6e24"}]}],"bundled":49},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mecab-ipadic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83"}]}],"bundled":49},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1"}]}],"bundled":49},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.0-150600.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.0-150600.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-150200.4.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-150200.4.75.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-11.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-11.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-11.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-150200.4.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-150200.4.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.0-3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.35.0-1ubuntu2.20+esm18"}]}],"versions":["7.32.0-1ubuntu1","7.33.0-1ubuntu1","7.34.0-1ubuntu1","7.35.0-1ubuntu1","7.35.0-1ubuntu2","7.35.0-1ubuntu2.1","7.35.0-1ubuntu2.2","7.35.0-1ubuntu2.3","7.35.0-1ubuntu2.5","7.35.0-1ubuntu2.6","7.35.0-1ubuntu2.7","7.35.0-1ubuntu2.8","7.35.0-1ubuntu2.9","7.35.0-1ubuntu2.10","7.35.0-1ubuntu2.11","7.35.0-1ubuntu2.12","7.35.0-1ubuntu2.13","7.35.0-1ubuntu2.14","7.35.0-1ubuntu2.15","7.35.0-1ubuntu2.16","7.35.0-1ubuntu2.17","7.35.0-1ubuntu2.19","7.35.0-1ubuntu2.20","7.35.0-1ubuntu2.20+esm2","7.35.0-1ubuntu2.20+esm3","7.35.0-1ubuntu2.20+esm4","7.35.0-1ubuntu2.20+esm5","7.35.0-1ubuntu2.20+esm6","7.35.0-1ubuntu2.20+esm7","7.35.0-1ubuntu2.20+esm8","7.35.0-1ubuntu2.20+esm9","7.35.0-1ubuntu2.20+esm10","7.35.0-1ubuntu2.20+esm11","7.35.0-1ubuntu2.20+esm12","7.35.0-1ubuntu2.20+esm13","7.35.0-1ubuntu2.20+esm14","7.35.0-1ubuntu2.20+esm15","7.35.0-1ubuntu2.20+esm16","7.35.0-1ubuntu2.20+esm17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.19+esm13"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7","7.47.0-1ubuntu2.8","7.47.0-1ubuntu2.9","7.47.0-1ubuntu2.11","7.47.0-1ubuntu2.12","7.47.0-1ubuntu2.13","7.47.0-1ubuntu2.14","7.47.0-1ubuntu2.15","7.47.0-1ubuntu2.16","7.47.0-1ubuntu2.18","7.47.0-1ubuntu2.19","7.47.0-1ubuntu2.19+esm1","7.47.0-1ubuntu2.19+esm2","7.47.0-1ubuntu2.19+esm3","7.47.0-1ubuntu2.19+esm4","7.47.0-1ubuntu2.19+esm5","7.47.0-1ubuntu2.19+esm6","7.47.0-1ubuntu2.19+esm7","7.47.0-1ubuntu2.19+esm8","7.47.0-1ubuntu2.19+esm9","7.47.0-1ubuntu2.19+esm10","7.47.0-1ubuntu2.19+esm11","7.47.0-1ubuntu2.19+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+esm5"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3","7.58.0-2ubuntu3.1","7.58.0-2ubuntu3.2","7.58.0-2ubuntu3.3","7.58.0-2ubuntu3.5","7.58.0-2ubuntu3.6","7.58.0-2ubuntu3.7","7.58.0-2ubuntu3.8","7.58.0-2ubuntu3.9","7.58.0-2ubuntu3.10","7.58.0-2ubuntu3.12","7.58.0-2ubuntu3.13","7.58.0-2ubuntu3.14","7.58.0-2ubuntu3.15","7.58.0-2ubuntu3.16","7.58.0-2ubuntu3.17","7.58.0-2ubuntu3.18","7.58.0-2ubuntu3.19","7.58.0-2ubuntu3.20","7.58.0-2ubuntu3.21","7.58.0-2ubuntu3.22","7.58.0-2ubuntu3.23","7.58.0-2ubuntu3.24","7.58.0-2ubuntu3.24+esm1","7.58.0-2ubuntu3.24+esm2","7.58.0-2ubuntu3.24+esm3","7.58.0-2ubuntu3.24+esm4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.23"}]}],"versions":["7.65.3-1ubuntu3","7.65.3-1ubuntu4","7.66.0-1ubuntu1","7.67.0-2ubuntu1","7.68.0-1ubuntu1","7.68.0-1ubuntu2","7.68.0-1ubuntu2.1","7.68.0-1ubuntu2.2","7.68.0-1ubuntu2.4","7.68.0-1ubuntu2.5","7.68.0-1ubuntu2.6","7.68.0-1ubuntu2.7","7.68.0-1ubuntu2.10","7.68.0-1ubuntu2.11","7.68.0-1ubuntu2.12","7.68.0-1ubuntu2.13","7.68.0-1ubuntu2.14","7.68.0-1ubuntu2.15","7.68.0-1ubuntu2.16","7.68.0-1ubuntu2.18","7.68.0-1ubuntu2.19","7.68.0-1ubuntu2.20","7.68.0-1ubuntu2.21","7.68.0-1ubuntu2.22"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.81.0-1ubuntu1.17"}]}],"versions":["7.74.0-1.3ubuntu2","7.74.0-1.3ubuntu3","7.80.0-3","7.81.0-1","7.81.0-1ubuntu1.1","7.81.0-1ubuntu1.2","7.81.0-1ubuntu1.3","7.81.0-1ubuntu1.4","7.81.0-1ubuntu1.6","7.81.0-1ubuntu1.7","7.81.0-1ubuntu1.8","7.81.0-1ubuntu1.10","7.81.0-1ubuntu1.11","7.81.0-1ubuntu1.13","7.81.0-1ubuntu1.14","7.81.0-1ubuntu1.15","7.81.0-1ubuntu1.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.0-2ubuntu10.2"}]}],"versions":["8.2.1-1ubuntu3","8.2.1-1ubuntu3.1","8.4.0-2ubuntu1","8.5.0-2ubuntu1","8.5.0-2ubuntu2","8.5.0-2ubuntu8","8.5.0-2ubuntu9","8.5.0-2ubuntu10","8.5.0-2ubuntu10.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.23"}]}],"versions":["7.65.3-1ubuntu3","7.65.3-1ubuntu4","7.66.0-1ubuntu1","7.67.0-2ubuntu1","7.68.0-1ubuntu1","7.68.0-1ubuntu2","7.68.0-1ubuntu2.1","7.68.0-1ubuntu2.2","7.68.0-1ubuntu2.4","7.68.0-1ubuntu2.5","7.68.0-1ubuntu2.6","7.68.0-1ubuntu2.7","7.68.0-1ubuntu2.10","7.68.0-1ubuntu2.11","7.68.0-1ubuntu2.12","7.68.0-1ubuntu2.13","7.68.0-1ubuntu2.14","7.68.0-1ubuntu2.15","7.68.0-1ubuntu2.16","7.68.0-1ubuntu2.18","7.68.0-1ubuntu2.19","7.68.0-1ubuntu2.20","7.68.0-1ubuntu2.21","7.68.0-1ubuntu2.22"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.81.0-1ubuntu1.17"}]}],"versions":["7.74.0-1.3ubuntu2","7.74.0-1.3ubuntu3","7.80.0-3","7.81.0-1","7.81.0-1ubuntu1.1","7.81.0-1ubuntu1.2","7.81.0-1ubuntu1.3","7.81.0-1ubuntu1.4","7.81.0-1ubuntu1.6","7.81.0-1ubuntu1.7","7.81.0-1ubuntu1.8","7.81.0-1ubuntu1.10","7.81.0-1ubuntu1.11","7.81.0-1ubuntu1.13","7.81.0-1ubuntu1.14","7.81.0-1ubuntu1.15","7.81.0-1ubuntu1.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.0-2ubuntu10.2"}]}],"versions":["8.2.1-1ubuntu3","8.2.1-1ubuntu3.1","8.4.0-2ubuntu1","8.5.0-2ubuntu1","8.5.0-2ubuntu2","8.5.0-2ubuntu8","8.5.0-2ubuntu9","8.5.0-2ubuntu10","8.5.0-2ubuntu10.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.35.0-1ubuntu2.20+esm18"}]}],"versions":["7.32.0-1ubuntu1","7.33.0-1ubuntu1","7.34.0-1ubuntu1","7.35.0-1ubuntu1","7.35.0-1ubuntu2","7.35.0-1ubuntu2.1","7.35.0-1ubuntu2.2","7.35.0-1ubuntu2.3","7.35.0-1ubuntu2.5","7.35.0-1ubuntu2.6","7.35.0-1ubuntu2.7","7.35.0-1ubuntu2.8","7.35.0-1ubuntu2.9","7.35.0-1ubuntu2.10","7.35.0-1ubuntu2.11","7.35.0-1ubuntu2.12","7.35.0-1ubuntu2.13","7.35.0-1ubuntu2.14","7.35.0-1ubuntu2.15","7.35.0-1ubuntu2.16","7.35.0-1ubuntu2.17","7.35.0-1ubuntu2.19","7.35.0-1ubuntu2.20","7.35.0-1ubuntu2.20+esm2","7.35.0-1ubuntu2.20+esm3","7.35.0-1ubuntu2.20+esm4","7.35.0-1ubuntu2.20+esm5","7.35.0-1ubuntu2.20+esm6","7.35.0-1ubuntu2.20+esm7","7.35.0-1ubuntu2.20+esm8","7.35.0-1ubuntu2.20+esm9","7.35.0-1ubuntu2.20+esm10","7.35.0-1ubuntu2.20+esm11","7.35.0-1ubuntu2.20+esm12","7.35.0-1ubuntu2.20+esm13","7.35.0-1ubuntu2.20+esm14","7.35.0-1ubuntu2.20+esm15","7.35.0-1ubuntu2.20+esm16","7.35.0-1ubuntu2.20+esm17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.19+esm13"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7","7.47.0-1ubuntu2.8","7.47.0-1ubuntu2.9","7.47.0-1ubuntu2.11","7.47.0-1ubuntu2.12","7.47.0-1ubuntu2.13","7.47.0-1ubuntu2.14","7.47.0-1ubuntu2.15","7.47.0-1ubuntu2.16","7.47.0-1ubuntu2.18","7.47.0-1ubuntu2.19","7.47.0-1ubuntu2.19+esm1","7.47.0-1ubuntu2.19+esm2","7.47.0-1ubuntu2.19+esm3","7.47.0-1ubuntu2.19+esm4","7.47.0-1ubuntu2.19+esm5","7.47.0-1ubuntu2.19+esm6","7.47.0-1ubuntu2.19+esm7","7.47.0-1ubuntu2.19+esm8","7.47.0-1ubuntu2.19+esm9","7.47.0-1ubuntu2.19+esm10","7.47.0-1ubuntu2.19+esm11","7.47.0-1ubuntu2.19+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+esm5"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3","7.58.0-2ubuntu3.1","7.58.0-2ubuntu3.2","7.58.0-2ubuntu3.3","7.58.0-2ubuntu3.5","7.58.0-2ubuntu3.6","7.58.0-2ubuntu3.7","7.58.0-2ubuntu3.8","7.58.0-2ubuntu3.9","7.58.0-2ubuntu3.10","7.58.0-2ubuntu3.12","7.58.0-2ubuntu3.13","7.58.0-2ubuntu3.14","7.58.0-2ubuntu3.15","7.58.0-2ubuntu3.16","7.58.0-2ubuntu3.17","7.58.0-2ubuntu3.18","7.58.0-2ubuntu3.19","7.58.0-2ubuntu3.20","7.58.0-2ubuntu3.21","7.58.0-2ubuntu3.22","7.58.0-2ubuntu3.23","7.58.0-2ubuntu3.24","7.58.0-2ubuntu3.24+esm1","7.58.0-2ubuntu3.24+esm2","7.58.0-2ubuntu3.24+esm3","7.58.0-2ubuntu3.24+esm4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.1-1.1"}]}]}],"products":[{"vendor":"curl","product":"curl"},{"vendor":"haxx","product":"libcurl"},{"vendor":"siemens","product":"ruggedcom rst2428p"},{"vendor":"siemens","product":"scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family"},{"vendor":"siemens","product":"scalance xch328"},{"vendor":"siemens","product":"scalance xcm-/xrm-/xch-/xrh-300 family"},{"vendor":"siemens","product":"scalance xcm324"},{"vendor":"siemens","product":"scalance xcm328"},{"vendor":"siemens","product":"scalance xcm332"},{"vendor":"siemens","product":"scalance xrh334 (24 v dc, 8xfo, cc)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230v ac, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24v dc, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230v ac, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://curl.se/docs/CVE-2024-7264.json","tags":["Vendor Advisory","web"]},{"url":"https://curl.se/docs/CVE-2024-7264.html","tags":["Vendor Advisory","web","report"]},{"url":"https://hackerone.com/reports/2629968","tags":["Exploit","Issue Tracking","Permissions Required","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/31/1","tags":["x_transferred","Mailing List","web"]},{"url":"https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","tags":["fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240828-0008/","tags":["advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241025-0010/","tags":["advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241025-0006/","tags":["advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-355557.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240828-0008"},{"url":"https://security.netapp.com/advisory/ntap-20241025-0006"},{"url":"https://security.netapp.com/advisory/ntap-20241025-0010"},{"url":"https://github.com/advisories/GHSA-97c4-2w4v-c7r8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-7264","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1671","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-11053","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21193","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21194","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21196","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21197","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21198","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21199","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21201","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21203","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21212","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21213","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21218","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21219","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21230","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21231","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21236","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21237","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21238","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21239","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21241","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21247","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-37371","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5535","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-7264","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21490","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21491","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21494","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21497","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21500","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21501","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21503","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21504","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21505","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21518","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21519","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21520","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21521","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21522","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21523","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21525","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21529","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21531","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21534","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21536","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21540","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21543","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21546","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21555","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21559","tags":["report"]},{"url":"https://bugzilla.redhat.com/2294581","tags":["report"]},{"url":"https://bugzilla.redhat.com/2294676","tags":["report"]},{"url":"https://bugzilla.redhat.com/2301888","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318857","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318858","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318870","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318873","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318874","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318876","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318882","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318883","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318884","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318885","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318886","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318897","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318900","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318905","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318914","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318922","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318923","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318925","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318926","tags":["report"]},{"url":"https://bugzilla.redhat.com/2318927","tags":["report"]},{"url":"https://bugzilla.redhat.com/2331191","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339218","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339220","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339221","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339226","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339231","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339236","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339238","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339243","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339247","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339252","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339259","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339266","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339270","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339271","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339275","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339277","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339281","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339284","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339291","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339293","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339295","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339299","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339300","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339304","tags":["report"]},{"url":"https://bugzilla.redhat.com/2339305","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-1671.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1673","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-1673.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-7264","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2024-44","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1726313254.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1726773445.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2025-1740823577.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1740824456.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2025-1741074282.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1741637440.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1750784906.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1750785256.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1751135005.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776599416.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776601980.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7264.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-7264","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2301888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339305","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-40867","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5470","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1671.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-7264","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-11053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11053","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2024-11053.html","tags":["article"]},{"url":"https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21193","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21194","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21196","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21197","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21198","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21199","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21201","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21203","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21212","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21213","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21218","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21218","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21219","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21230","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21231","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21236","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21237","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21238","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21239","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21241","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21247","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21247","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-37371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","tags":["advisory"]},{"url":"https://web.mit.edu/kerberos/www/krb5-1.21/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21490","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21490","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21491","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21494","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21497","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21497","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21500","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21500","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21501","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21501","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21503","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21504","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21504","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21505","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21518","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21519","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21520","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21520","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21521","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21522","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21523","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21525","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21529","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21531","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21534","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21536","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21540","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21543","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21546","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21555","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21559","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-40866","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1673.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:1671","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:1673","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242784-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227888","tags":["report"]},{"url":"https://bugzilla.suse.com/1228535","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7264","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242930-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242938-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243080-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243080-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243202-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230093","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8096","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520029-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1221665","tags":["report"]},{"url":"https://bugzilla.suse.com/1221666","tags":["report"]},{"url":"https://bugzilla.suse.com/1221667","tags":["report"]},{"url":"https://bugzilla.suse.com/1221668","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2466","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-7264","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6944-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6944-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-7264","title":"ASN.1 date parser overread","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:08:14.585Z","modified":"2026-10-15T00:33:44.872Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:21.025267Z"}],"euvd":[{"id":"EUVD-2024-48211","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:08:14Z","modified":"2026-10-15T00:33:44Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T17:27:10.794682Z"}],"ghsa":[{"id":"GHSA-97c4-2w4v-c7r8","title":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized...","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T09:30:49Z","modified":"2026-10-15T03:35:03Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:13:31.944762Z"}],"nvd":[{"id":"CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:15:02.657Z","modified":"2026-10-15T01:19:20.45Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:10:15.933769Z"}],"osv":[{"id":"ALPINE-CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:15:02.657Z","modified":"2026-11-02T11:17:50.134191172Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-47253","title":"CVE-2024-7264 affecting package rust for versions less than 1.68.0-1","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:15:02Z","modified":"2026-04-21T04:32:51.501934Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"AZL-47282","title":"CVE-2024-7264 affecting package cmake for versions less than 3.30.3-4","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:15:02Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"BELL-CVE-2024-7264","status":"published","published":"2024-08-01T05:58:37.212638Z","modified":"2026-01-26T09:37:10.281216Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2024-7264","title":"ASN.1 date parser overread","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:08:14.585Z","modified":"2026-10-28T10:42:14.295407799Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:45.405014Z"},{"id":"DEBIAN-CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.  This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:15:02.657Z","modified":"2026-11-02T12:03:12.156430339Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"JLSEC-2025-38","title":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized...","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2025-10-10T15:04:01.319Z","modified":"2026-07-25T18:23:42.975052151Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"RHSA-2025:1671","title":"Red Hat Security Advisory: mysql security update","status":"published","published":"2025-02-20T10:02:51Z","modified":"2026-10-17T10:05:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:1673","title":"Red Hat Security Advisory: mysql:8.0 security update","status":"published","published":"2025-02-20T10:02:51Z","modified":"2026-10-17T10:05:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RLSA-2025:1671","title":"Important: mysql security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.\n\nSecurity Fix(es):\n\n* openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)\n\n* krb5: GSS message token handling (CVE-2024-37371)\n\n* curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)\n\n* mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)\n\n* mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)\n\n* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)\n\n* mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)\n\n* mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)\n\n* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)\n\n* mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)\n\n* mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)\n\n* mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)\n\n* mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)\n\n* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)\n\n* mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)\n\n* mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)\n\n* mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)\n\n* curl: curl netrc password leak (CVE-2024-11053)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)\n\n* mysql: MySQL Server Options Vulnerability (CVE-2025-21520)\n\n* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)\n\n* mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)\n\n* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)\n\n* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)\n\n* mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)\n\n* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)\n\n* mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)\n\n* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)\n\n* mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)\n\n* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)\n\n* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)\n\n* mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)\n\n* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)\n\n* mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)\n\n* mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-03-17T20:16:45.510776Z","modified":"2025-10-09T06:18:53.285992Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T00:00:00Z","modified":"2026-04-22T15:27:56.01387Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"ALSA-2025:1671","title":"Important: mysql security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  \n\nSecurity Fix(es):  \n\n  * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)\n  * krb5: GSS message token handling (CVE-2024-37371)\n  * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)\n  * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)\n  * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)\n  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)\n  * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)\n  * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)\n  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)\n  * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)\n  * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)\n  * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)\n  * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)\n  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)\n  * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)\n  * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)\n  * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)\n  * curl: curl netrc password leak (CVE-2024-11053)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)\n  * mysql: MySQL Server Options Vulnerability (CVE-2025-21520)\n  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)\n  * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)\n  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)\n  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)\n  * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)\n  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)\n  * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)\n  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)\n  * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)\n  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)\n  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)\n  * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)\n  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)\n  * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)\n  * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-02-19T00:00:00Z","modified":"2026-10-29T11:32:28.219181801Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:1673","title":"Important: mysql:8.0 security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  \n\nSecurity Fix(es):  \n\n  * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)\n  * krb5: GSS message token handling (CVE-2024-37371)\n  * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)\n  * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)\n  * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)\n  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)\n  * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)\n  * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)\n  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)\n  * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)\n  * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)\n  * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)\n  * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)\n  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)\n  * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)\n  * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)\n  * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)\n  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)\n  * curl: curl netrc password leak (CVE-2024-11053)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)\n  * mysql: MySQL Server Options Vulnerability (CVE-2025-21520)\n  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)\n  * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)\n  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)\n  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)\n  * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)\n  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)\n  * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)\n  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)\n  * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)\n  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)\n  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)\n  * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)\n  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)\n  * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)\n  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)\n  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)\n  * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-02-19T00:00:00Z","modified":"2026-10-29T11:02:22.53965828Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2024-1726313254","title":"Fix CVE(s): CVE-2024-7264","description":"   * SECURITY UPDATE: Heap Buffer Overflow in ASN.1 Parser\n     - debian/patches/CVE-2024-7264.patch: Clean up GTime2str function to handle\n       optional fractional seconds properly. Fix GTime2str() issues and add unit\n       tests to verify correct behaviour\n     - CVE-2024-7264","status":"published","published":"2024-09-14T11:27:37Z","modified":"2026-06-04T10:04:09.689019Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1726773445","title":"Fix CVE(s): CVE-2024-7264","description":"   * SECURITY UPDATE: Heap Buffer Overflow in ASN.1 Parser\n     - debian/patches/CVE-2024-7264.patch: Clean up GTime2str function to handle\n       optional fractional seconds properly. Fix GTime2str() issues and add unit\n       tests to verify correct behaviour\n     - CVE-2024-7264","status":"published","published":"2024-09-19T19:17:28Z","modified":"2026-06-04T10:04:10.950073Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1740823577","title":"mysql: Fix of 49 CVEs","description":"- Update to MySQL 8.0.41\n- CVEs fixed:\n  CVE-2024-5535  CVE-2024-7264  CVE-2024-11053 CVE-2024-21193 CVE-2024-21194\n  CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201\n  CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219\n  CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238\n  CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490\n  CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501\n  CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519\n  CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525\n  CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540\n  CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559\n- Rebase mysql-mtr.patch\n- Remove mysql-fix-includes-robin-hood.patch\n- Rebase mysql-increase-wait-until-connect-timeout.patch","status":"published","published":"2025-03-01T10:06:22Z","modified":"2026-10-21T10:46:37.056054892Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1740824456","title":"mysql: Fix of 49 CVEs","description":"- Update to MySQL 8.0.41\n- CVEs fixed:\n  CVE-2024-5535  CVE-2024-7264  CVE-2024-11053 CVE-2024-21193 CVE-2024-21194\n  CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201\n  CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219\n  CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238\n  CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490\n  CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501\n  CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519\n  CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525\n  CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540\n  CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559\n- Rebase mysql-mtr.patch\n- Remove mysql-fix-includes-robin-hood.patch\n- Rebase mysql-increase-wait-until-connect-timeout.patch","status":"published","published":"2025-03-01T10:21:01Z","modified":"2026-10-21T10:48:07.933249858Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741074282","title":"mysql: Fix of 49 CVEs","description":"- Update to MySQL 8.0.41\n- CVEs fixed:\n  CVE-2024-5535  CVE-2024-7264  CVE-2024-11053 CVE-2024-21193 CVE-2024-21194\n  CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201\n  CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219\n  CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238\n  CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490\n  CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501\n  CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519\n  CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525\n  CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540\n  CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559\n- Rebase mysql-mtr.patch\n- Remove mysql-fix-includes-robin-hood.patch\n- Rebase mysql-increase-wait-until-connect-timeout.patch","status":"published","published":"2025-03-04T08:12:55Z","modified":"2026-10-21T10:45:47.716605506Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741637440","title":"mysql: Fix of 23 CVEs","description":"- Update to MySQL 8.0.41\n- CVEs fixed:\n  CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543\n  CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522\n  CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504\n  CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491\n  CVE-2025-21490 CVE-2024-11053 CVE-2024-7264","status":"published","published":"2025-03-10T20:10:45Z","modified":"2026-10-21T10:45:25.984024339Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1750784906","title":"curl: Fix of CVE-2024-7264","description":"- CVE-2024-7264: fix out-of-bound read in GTime2str() function","status":"published","published":"2025-06-24T17:08:31Z","modified":"2026-06-01T00:33:21.250581314Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1750785256","title":"curl: Fix of CVE-2024-7264","description":"- CVE-2024-7264: fix out-of-bound read in GTime2str() function","status":"published","published":"2025-06-24T17:14:21Z","modified":"2026-06-01T00:33:23.119349143Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751135005","title":"curl: Fix of CVE-2024-7264","description":"- CVE-2024-7264: fix out-of-bound read in GTime2str() function","status":"published","published":"2025-06-28T18:23:30Z","modified":"2026-06-01T00:32:58.844744856Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1776599416","title":"curl: Fix of CVE-2024-7264","description":"- CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by\n  off-by-one in fractional seconds length calculation","status":"published","published":"2026-04-19T11:50:20Z","modified":"2026-06-01T00:32:23.553318124Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776601980","title":"curl: Fix of CVE-2024-7264","description":"- CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by\n  off-by-one in fractional seconds length calculation","status":"published","published":"2026-04-21T13:05:38Z","modified":"2026-06-01T00:32:47.434635788Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CURL-CVE-2024-7264","title":"ASN.1 date parser overread","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null-terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.","status":"published","published":"2024-07-31T08:00:00Z","modified":"2026-10-25T01:05:03.46477006Z","updated_at":"2026-11-02T15:43:55.998148Z"},{"id":"openSUSE-SU-2024:14261-1","title":"curl-8.9.1-1.1 on GA media","description":"These are all security issues fixed in the curl-8.9.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-13T00:00:00Z","modified":"2026-02-04T04:40:29.375845Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2025:1673","title":"Important: mysql:8.0 security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.\n\nSecurity Fix(es):\n\n* openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)\n\n* krb5: GSS message token handling (CVE-2024-37371)\n\n* curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)\n\n* mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)\n\n* mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)\n\n* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)\n\n* mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)\n\n* mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)\n\n* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)\n\n* mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)\n\n* mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)\n\n* mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)\n\n* mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)\n\n* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)\n\n* mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)\n\n* mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)\n\n* mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)\n\n* curl: curl netrc password leak (CVE-2024-11053)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)\n\n* mysql: MySQL Server Options Vulnerability (CVE-2025-21520)\n\n* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)\n\n* mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)\n\n* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)\n\n* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)\n\n* mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)\n\n* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)\n\n* mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)\n\n* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)\n\n* mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)\n\n* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)\n\n* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)\n\n* mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)\n\n* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)\n\n* mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)\n\n* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)\n\n* mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-02-26T19:09:52.852483Z","modified":"2026-02-05T09:15:10.971587Z","updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"SUSE-SU-2024:2784-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2024-7264: Fixed ASN.1 date parser overread (bsc#1228535)\n- CVE-2024-6197: Fixed freeing stack buffer in utf8asn1str (bsc#1227888)\n","status":"published","published":"2024-08-06T12:58:40Z","modified":"2026-02-04T04:02:39.062499Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2930-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n  \n- CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)\n","status":"published","published":"2024-08-15T09:35:09Z","modified":"2026-02-04T04:19:38.728261Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2938-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)\n","status":"published","published":"2024-08-15T15:49:11Z","modified":"2026-02-04T03:28:53.905936Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:3080-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n  - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)\n","status":"published","published":"2024-09-02T14:44:00Z","modified":"2026-02-04T03:16:47.23844Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:3080-2","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n  - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)\n","status":"published","published":"2024-09-13T13:48:06Z","modified":"2026-02-04T03:43:07.844482Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:3202-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2024-8096: OCSP stapling bypass with GnuTLS. (bsc#1230093)\n- CVE-2024-7264: ASN.1 date parser overread. (bsc#1228535)\n","status":"published","published":"2024-09-11T08:54:52Z","modified":"2026-02-04T03:49:34.058349Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:20029-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-7264: ASN.1 date parser overread (bsc#1228535)\n- CVE-2024-6197: Freeing stack buffer in utf8asn1str (bsc#1227888)\n- CVE-2024-2379: QUIC certificate check bypass with wolfSSL (bsc#1221666)\n- CVE-2024-2466: TLS certificate check bypass with mbedTLS (bsc#1221668)\n- CVE-2024-2004: Usage of disabled protocol (bsc#1221665)\n- CVE-2024-2398: HTTP/2 push headers memory-leak (bsc#1221667)\n\nNon-security issue fixed:\n\n- Fixed various TLS related issues including FTP over SSL transmission timeouts.\n","status":"published","published":"2025-02-03T08:51:25Z","modified":"2026-03-23T04:50:02.900924Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-6944-1","title":"curl vulnerability","description":"Dov Murik discovered that curl incorrectly handled parsing ASN.1\nGeneralized Time fields. A remote attacker could use this issue to cause\ncurl to crash, resulting in a denial of service, or possibly obtain\nsensitive memory contents.\n","status":"published","published":"2024-08-05T11:21:44Z","modified":"2026-04-27T17:23:54.920057Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6944-2","title":"curl vulnerability","description":"USN-6944-1 fixed CVE-2024-7264 for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and\nUbuntu 24.04 LTS. This update provides the corresponding fix for\nUbuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\nDov Murik discovered that curl incorrectly handled parsing ASN.1\nGeneralized Time fields. A remote attacker could use this issue to cause\ncurl to crash, resulting in a denial of service, or possibly obtain\nsensitive memory contents.\n\n","status":"published","published":"2024-08-20T18:15:39Z","modified":"2026-06-29T13:51:14.775480541Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}