{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "curl: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/curl--curl/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/curl--curl/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · disclosed",
   "content_text": "During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Alpine 3.21 (curl 8.14.1-r3)",
   "content_text": "Fixed versions: curl 8.14.1-r3.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Alpine 3.22 (curl 8.14.1-r4)",
   "content_text": "Fixed versions: curl 8.14.1-r4.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Alpine 3.23 (curl 8.23.0-r0)",
   "content_text": "Fixed versions: curl 8.23.0-r0.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Alpine 3.24 (curl 8.23.0-r0)",
   "content_text": "Fixed versions: curl 8.23.0-r0.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Amazon Linux 2023 (curl 8.21.0-5.amzn2023.0.3 and 4 more)",
   "content_text": "Fixed versions: curl 8.21.0-5.amzn2023.0.3, curl-minimal 8.21.0-5.amzn2023.0.3, libcurl 8.21.0-5.amzn2023.0.3, libcurl-devel 8.21.0-5.amzn2023.0.3, libcurl-minimal 8.21.0-5.amzn2023.0.3.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Chainguard (curl 8.23.0-r0)",
   "content_text": "Fixed versions: curl 8.23.0-r0.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Debian 13 (curl 8.14.1-2+deb13u7)",
   "content_text": "Fixed versions: curl 8.14.1-2+deb13u7.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in openSUSE Tumbleweed (curl 8.23.0-1.1)",
   "content_text": "Fixed versions: curl 8.23.0-1.1.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Red Hat hummingbird 1 (cargo 0:1.99.0-1.hum1 and 22 more)",
   "content_text": "Fixed versions: cargo 0:1.99.0-1.hum1, clippy 0:1.99.0-1.hum1, curl 0:8.23.0-0.1.hum1, libcurl 0:8.23.0-0.1.hum1, libcurl-devel 0:8.23.0-0.1.hum1, libcurl-minimal 0:8.23.0-0.1.hum1, rust 0:1.99.0-1.hum1, rust-analyzer 0:1.99.0-1.hum1, rust-debugger-common 0:1.99.0-1.hum1, rust-doc 0:1.99.0-1.hum1, rust-gdb 0:1.99.0-1.hum1, rust-lldb 0:1.99.0-1.hum1, rust-src 0:1.99.0-1.hum1, rust-std-static 0:1.99.0-1.hum1, rust-std-static-aarch64-unknown-none-softfloat 0:1.99.0-1.hum1, rust-std-static-aarch64-unknown-uefi 0:1.99.0-1.hum1, rust-std-static-i686-pc-windows-gnu 0:1.99.0-1.hum1, rust-std-static-wasm32-unknown-unknown 0:1.99.0-1.hum1, rust-std-static-wasm32-wasip1 0:1.99.0-1.hum1, rust-std-static-x86_64-pc-windows-gnu 0:1.99.0-1.hum1, rust-std-static-x86_64-unknown-none 0:1.99.0-1.hum1, rust-std-static-x86_64-unknown-uefi 0:1.99.0-1.hum1, rustfmt 0:1.99.0-1.hum1.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Ubuntu 26.04 LTS (curl 8.18.0-1ubuntu2.8)",
   "content_text": "Fixed versions: curl 8.18.0-1ubuntu2.8.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Ubuntu 26.10 (curl 8.20.0-2ubuntu11.1)",
   "content_text": "Fixed versions: curl 8.20.0-2ubuntu11.1.",
   "date_published": "2026-10-14T07:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92392/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92392/",
   "title": "CVE-2026-92392 · curl · fixed in Wolfi (curl 8.23.0-r0)",
   "content_text": "Fixed versions: curl 8.23.0-r0.",
   "date_published": "2026-10-14T07:46:15Z"
  }
 ]
}