Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1269629

Bug#1120262: curl 8.14.1-2+deb13u1 flagged for acceptance

From Paul Gevers <elbrus@debian.org>
Newsgroups linux.debian.bugs.dist, linux.debian.ports.s390, linux.debian.devel.release
Subject Bug#1120262: curl 8.14.1-2+deb13u1 flagged for acceptance
Date 2025-11-09 12:00 +0100
Message-ID <LPbjj-bDsB-1@gated-at.bofh.it> (permalink)
References <LO8nv-aVFX-3@gated-at.bofh.it> <LOAtr-beIs-7@gated-at.bofh.it> <LO8nv-aVFX-3@gated-at.bofh.it> <LOAtr-beIs-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 3 groups.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Hi,

On 11/7/25 20:36, Adam D Barratt wrote:
> Package: curl
> Version: 8.14.1-2+deb13u1
> 
> Explanation: fix buffer over-read issue [CVE-2025-9086]; fix cache poisoning issue [CVE-2025-10148]; fix path traversal issue [CVE-2025-10148]; allow --output to be overridden by --curl-options; fix manpage example for "continue-at"


https://release.debian.org/proposed-updates/stable.html shows a 
regression (4 tries, the test doesn't seem to have a flaky history) in 
mpd on s390x. Now I'm not really worried that people use mpd on s390x, 
but it might indicate a subtle issue with curl on s390x. Care to have a 
look? I've CC'd the mpd maintainers as they might be able to tell what 
failure they are observing in their test. I also CC'd the s390x porters 
as they might care about curl behavior on s390x.

Paul

PS: the other "regressions" will go away when the page is refreshed as 
they all passed on retry or are flaky tests.

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#1120262: trixie-pu: package curl/8.14.1-2+deb13u1 Alex <alex@puer-robustus.eu> - 2025-11-06 14:40 +0100
  Bug#1120262: trixie-pu: package curl/8.14.1-2+deb13u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2025-11-06 20:20 +0100
  Bug#1120262: curl 8.14.1-2+deb13u1 flagged for acceptance Adam D Barratt <adam@adam-barratt.org.uk> - 2025-11-07 20:40 +0100
    Bug#1120262: curl 8.14.1-2+deb13u1 flagged for acceptance Paul Gevers <elbrus@debian.org> - 2025-11-09 12:00 +0100
      Bug#1120262: curl 8.14.1-2+deb13u1 flagged for acceptance Adrian Bunk <bunk@debian.org> - 2025-11-09 14:20 +0100
        Bug#1120262: curl 8.14.1-2+deb13u1 flagged for acceptance Paul Gevers <elbrus@debian.org> - 2025-11-09 17:20 +0100

csiph-web