{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian10els/vex/2024/cve-2024-28182-els_os-debian10els.json" } ], "tracking": { "current_release_date": "2026-08-07T20:30:34Z", "generator": { "date": "2026-08-07T20:30:34Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2024-28182-ELS_OS-DEBIAN10ELS", "initial_release_date": "2024-04-03T00:00:00Z", "revision_history": [ { "date": "2024-04-03T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-07-31T18:30:39Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-08-01T22:30:31Z", "number": "3", "summary": "Update document" }, { "date": "2026-08-03T13:44:11Z", "number": "4", "summary": "Update document" }, { "date": "2026-08-07T20:30:34Z", "number": "5", "summary": "Update document" } ], "status": "final", "version": "5" }, "title": "Security update on CVE-2024-28182" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64", "product": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64", "product_id": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcurl4-openssl-dev@7.64.0-4%2Bdeb10u9?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64", "product": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64", "product_id": "libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcurl4-nss-dev@7.64.0-4%2Bdeb10u9?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-nss-0:7.64.0-4+deb10u9.amd64", "product": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9.amd64", "product_id": "libcurl3-nss-0:7.64.0-4+deb10u9.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcurl3-nss@7.64.0-4%2Bdeb10u9?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64", "product": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64", "product_id": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcurl4-gnutls-dev@7.64.0-4%2Bdeb10u9?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-0:7.64.0-4+deb10u9.amd64", "product": { "name": "libcurl4-0:7.64.0-4+deb10u9.amd64", "product_id": "libcurl4-0:7.64.0-4+deb10u9.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcurl4@7.64.0-4%2Bdeb10u9?arch=amd64" } } }, { "category": "product_version", "name": "curl-0:7.64.0-4+deb10u9.amd64", "product": { "name": "curl-0:7.64.0-4+deb10u9.amd64", "product_id": "curl-0:7.64.0-4+deb10u9.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/curl@7.64.0-4%2Bdeb10u9?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64", "product": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64", "product_id": "libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcurl3-gnutls@7.64.0-4%2Bdeb10u9?arch=amd64" } } }, { "category": "product_version", "name": "nghttp2-server-0:1.36.0-2+deb10u3.amd64", "product": { "name": "nghttp2-server-0:1.36.0-2+deb10u3.amd64", "product_id": "nghttp2-server-0:1.36.0-2+deb10u3.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/nghttp2-server@1.36.0-2%2Bdeb10u3?arch=amd64" } } }, { "category": "product_version", "name": "libnghttp2-14-0:1.36.0-2+deb10u3.amd64", "product": { "name": "libnghttp2-14-0:1.36.0-2+deb10u3.amd64", "product_id": "libnghttp2-14-0:1.36.0-2+deb10u3.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libnghttp2-14@1.36.0-2%2Bdeb10u3?arch=amd64" } } }, { "category": "product_version", "name": "libnghttp2-dev-0:1.36.0-2+deb10u3.amd64", "product": { "name": "libnghttp2-dev-0:1.36.0-2+deb10u3.amd64", "product_id": "libnghttp2-dev-0:1.36.0-2+deb10u3.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libnghttp2-dev@1.36.0-2%2Bdeb10u3?arch=amd64" } } }, { "category": "product_version", "name": "nghttp2-proxy-0:1.36.0-2+deb10u3.amd64", "product": { "name": "nghttp2-proxy-0:1.36.0-2+deb10u3.amd64", "product_id": "nghttp2-proxy-0:1.36.0-2+deb10u3.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/nghttp2-proxy@1.36.0-2%2Bdeb10u3?arch=amd64" } } }, { "category": "product_version", "name": "nghttp2-client-0:1.36.0-2+deb10u3.amd64", "product": { "name": "nghttp2-client-0:1.36.0-2+deb10u3.amd64", "product_id": "nghttp2-client-0:1.36.0-2+deb10u3.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/nghttp2-client@1.36.0-2%2Bdeb10u3?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "libcurl4-doc-0:7.64.0-4+deb10u9.all", "product": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9.all", "product_id": "libcurl4-doc-0:7.64.0-4+deb10u9.all", "product_identification_helper": { "purl": "pkg:deb/debian/libcurl4-doc@7.64.0-4%2Bdeb10u9?arch=all" } } }, { "category": "product_version", "name": "nghttp2-0:1.36.0-2+deb10u3.all", "product": { "name": "nghttp2-0:1.36.0-2+deb10u3.all", "product_id": "nghttp2-0:1.36.0-2+deb10u3.all", "product_identification_helper": { "purl": "pkg:deb/debian/nghttp2@1.36.0-2%2Bdeb10u3?arch=all" } } }, { "category": "product_version", "name": "libnghttp2-doc-0:1.36.0-2+deb10u3.all", "product": { "name": "libnghttp2-doc-0:1.36.0-2+deb10u3.all", "product_id": "libnghttp2-doc-0:1.36.0-2+deb10u3.all", "product_identification_helper": { "purl": "pkg:deb/debian/libnghttp2-doc@1.36.0-2%2Bdeb10u3?arch=all" } } } ], "category": "architecture", "name": "all" }, { "branches": [ { "category": "product_name", "name": "Debian 10", "product": { "name": "Debian 10", "product_id": "Debian-10", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product": { "name": "nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_id": "nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/nghttp2-server@1.36.0-2%2Bdeb10u3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product": { "name": "libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_id": "libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnghttp2-14@1.36.0-2%2Bdeb10u3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product": { "name": "libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_id": "libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnghttp2-dev@1.36.0-2%2Bdeb10u3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product": { "name": "nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_id": "nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/nghttp2-proxy@1.36.0-2%2Bdeb10u3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product": { "name": "nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_id": "nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/nghttp2-client@1.36.0-2%2Bdeb10u3%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_id": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-openssl-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_id": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-openssl-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_id": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-openssl-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_id": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-openssl-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_id": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-nss-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_id": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-nss-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_id": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-nss-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_id": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-nss-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_id": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-nss@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_id": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-nss@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_id": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-nss@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_id": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-nss@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_id": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-gnutls-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_id": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-gnutls-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_id": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-gnutls-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_id": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-gnutls-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_id": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_id": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_id": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_id": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_id": "curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/curl@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_id": "curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/curl@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_id": "curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/curl@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_id": "curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/curl@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_id": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-gnutls@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_id": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-gnutls@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_id": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-gnutls@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_id": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-gnutls@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_id": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-openssl-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_id": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-gnutls-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_id": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-nss-dev@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_id": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-nss@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_id": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_id": "curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/curl@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_id": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl3-gnutls@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all", "product": { "name": "nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all", "product_id": "nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/nghttp2@1.36.0-2%2Bdeb10u3%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all", "product": { "name": "libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all", "product_id": "libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnghttp2-doc@1.36.0-2%2Bdeb10u3%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all", "product": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all", "product_id": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-doc@7.64.0-4%2Bdeb10u9%2Btuxcare.els3?arch=all" } } }, { "category": "product_version", "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all", "product": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all", "product_id": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-doc@7.64.0-4%2Bdeb10u9%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all", "product": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all", "product_id": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-doc@7.64.0-4%2Bdeb10u9%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all", "product": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all", "product_id": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-doc@7.64.0-4%2Bdeb10u9%2Btuxcare.els4?arch=all" } } }, { "category": "product_version", "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all", "product": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all", "product_id": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcurl4-doc@7.64.0-4%2Bdeb10u9%2Btuxcare.els5?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64" }, "product_reference": "nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64" }, "product_reference": "libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64" }, "product_reference": "libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64" }, "product_reference": "nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all" }, "product_reference": "nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all" }, "product_reference": "libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64" }, "product_reference": "nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64" }, "product_reference": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64" }, "product_reference": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64" }, "product_reference": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64" }, "product_reference": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all as a component of Debian 10", "product_id": "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all" }, "product_reference": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all" }, "product_reference": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all as a component of Debian 10", "product_id": "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all" }, "product_reference": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all as a component of Debian 10", "product_id": "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all" }, "product_reference": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64" }, "product_reference": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64" }, "product_reference": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64" }, "product_reference": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64" }, "product_reference": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64" }, "product_reference": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64" }, "product_reference": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64" }, "product_reference": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64" }, "product_reference": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64" }, "product_reference": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64" }, "product_reference": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64" }, "product_reference": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64" }, "product_reference": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64" }, "product_reference": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64" }, "product_reference": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64" }, "product_reference": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64" }, "product_reference": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64 as a component of Debian 10", "product_id": "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64" }, "product_reference": "curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64" }, "product_reference": "curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64 as a component of Debian 10", "product_id": "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64" }, "product_reference": "curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64 as a component of Debian 10", "product_id": "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64" }, "product_reference": "curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64" }, "product_reference": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64" }, "product_reference": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64" }, "product_reference": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64" }, "product_reference": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64" }, "product_reference": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9.all as a component of Debian 10", "product_id": "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9.all" }, "product_reference": "libcurl4-doc-0:7.64.0-4+deb10u9.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64" }, "product_reference": "libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9.amd64" }, "product_reference": "libcurl3-nss-0:7.64.0-4+deb10u9.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64" }, "product_reference": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:7.64.0-4+deb10u9.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-0:7.64.0-4+deb10u9.amd64" }, "product_reference": "libcurl4-0:7.64.0-4+deb10u9.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:7.64.0-4+deb10u9.amd64 as a component of Debian 10", "product_id": "Debian-10:curl-0:7.64.0-4+deb10u9.amd64" }, "product_reference": "curl-0:7.64.0-4+deb10u9.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64" }, "product_reference": "libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-server-0:1.36.0-2+deb10u3.amd64 as a component of Debian 10", "product_id": "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3.amd64" }, "product_reference": "nghttp2-server-0:1.36.0-2+deb10u3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-14-0:1.36.0-2+deb10u3.amd64 as a component of Debian 10", "product_id": "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3.amd64" }, "product_reference": "libnghttp2-14-0:1.36.0-2+deb10u3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-dev-0:1.36.0-2+deb10u3.amd64 as a component of Debian 10", "product_id": "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3.amd64" }, "product_reference": "libnghttp2-dev-0:1.36.0-2+deb10u3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-proxy-0:1.36.0-2+deb10u3.amd64 as a component of Debian 10", "product_id": "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3.amd64" }, "product_reference": "nghttp2-proxy-0:1.36.0-2+deb10u3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.36.0-2+deb10u3.all as a component of Debian 10", "product_id": "Debian-10:nghttp2-0:1.36.0-2+deb10u3.all" }, "product_reference": "nghttp2-0:1.36.0-2+deb10u3.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-doc-0:1.36.0-2+deb10u3.all as a component of Debian 10", "product_id": "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3.all" }, "product_reference": "libnghttp2-doc-0:1.36.0-2+deb10u3.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-client-0:1.36.0-2+deb10u3.amd64 as a component of Debian 10", "product_id": "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3.amd64" }, "product_reference": "nghttp2-client-0:1.36.0-2+deb10u3.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64" }, "product_reference": "libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all as a component of Debian 10", "product_id": "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all" }, "product_reference": "libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64" }, "product_reference": "libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64" }, "product_reference": "libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64" }, "product_reference": "libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64" }, "product_reference": "libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64 as a component of Debian 10", "product_id": "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64" }, "product_reference": "curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64 as a component of Debian 10", "product_id": "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64" }, "product_reference": "libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-28182", "cwe": { "id": "CWE-390", "name": "Detection of Error Condition Without Action" }, "notes": [ { "category": "description", "text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9.all", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3.amd64", "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3.amd64", "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all", "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3.all", "Debian-10:nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all", "Debian-10:nghttp2-0:1.36.0-2+deb10u3.all", "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3.amd64", "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3.amd64", "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-28182" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/03/16", "url": "http://www.openwall.com/lists/oss-security/2024/04/03/16" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0", "url": "https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9", "url": "https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q", "url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html", "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/09/msg00041.html", "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00041.html" }, { "category": "external", "summary": "https://www.kb.cert.org/vuls/id/421644", "url": "https://www.kb.cert.org/vuls/id/421644" } ], "release_date": "2024-04-03T00:00:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-08-03T11:36:47.024062Z", "details": "CVE-2024-28182 is a DoS-only condition in libnghttp2 that can spike CPU by accepting unbounded HTTP/2 CONTINUATION frames after a stream reset, with no confidentiality or integrity impact. It only affects components that directly terminate HTTP/2 using libnghttp2; when HTTP/2 termination occurs at a front-end reverse proxy or cloud load balancer, any effect is localized to that edge and does not reach backend hosts. Because exploitation requires sustaining abusive HTTP/2 sessions to consume CPU on a per-connection basis, the practical blast radius is limited in centrally managed enterprise VM/server environments.", "product_ids": [ "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9.all", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3.amd64", "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3.amd64", "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all", "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3.all", "Debian-10:nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all", "Debian-10:nghttp2-0:1.36.0-2+deb10u3.all", "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3.amd64", "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3.amd64", "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:curl-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl3-gnutls-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl3-nss-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els1.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els2.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els3.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els4.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9+tuxcare.els5.all", "Debian-10:libcurl4-doc-0:7.64.0-4+deb10u9.all", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-gnutls-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-nss-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els1.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els2.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els3.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els4.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9+tuxcare.els5.amd64", "Debian-10:libcurl4-openssl-dev-0:7.64.0-4+deb10u9.amd64", "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:libnghttp2-14-0:1.36.0-2+deb10u3.amd64", "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:libnghttp2-dev-0:1.36.0-2+deb10u3.amd64", "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3+tuxcare.els1.all", "Debian-10:libnghttp2-doc-0:1.36.0-2+deb10u3.all", "Debian-10:nghttp2-0:1.36.0-2+deb10u3+tuxcare.els1.all", "Debian-10:nghttp2-0:1.36.0-2+deb10u3.all", "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-client-0:1.36.0-2+deb10u3.amd64", "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-proxy-0:1.36.0-2+deb10u3.amd64", "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3+tuxcare.els1.amd64", "Debian-10:nghttp2-server-0:1.36.0-2+deb10u3.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }