ALT-PU-2026-14688-1

Обновление пакета curl в ветке sisyphus_e2k

Версия8.21.0-alt2
Задание#0
Опубликовано2026-09-02
Макс. серьёзностьMEDIUM
Серьёзность:

Закрытые проблемы (1)

CVE-2024-32928
MEDIUM5.9

The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle attack on requests to Google cloud services by any host the traffic was routed through.

Опубликовано: 2024-08-19Изменено: 2026-06-17
CVSS 3.xСРЕДНЯЯ 5.9
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N