From 24f8f52e0b66b531cf057e27343e6ff5cc105df0 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Tue, 30 Jul 2024 09:59:37 +0200 Subject: [PATCH] CVE-2024-6197.md: mbedTLS builds are also affected! --- docs/CVE-2024-6197.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/CVE-2024-6197.md b/docs/CVE-2024-6197.md index 85a7ddd7fe..0b10a2f1f5 100644 --- a/docs/CVE-2024-6197.md +++ b/docs/CVE-2024-6197.md @@ -44,8 +44,8 @@ AFFECTED VERSIONS ----------------- The vulnerable code can only be reached when curl is built to use GnuTLS, -wolfSSL, Schannel or Secure Transport. Builds using other TLS backends are not -vulnerable. +wolfSSL, Schannel, Secure Transport or mbedTLS. Builds using other TLS +backends are not vulnerable. - Affected versions: curl 8.6.0 to and including 8.8.0 - Not affected versions: curl < 8.6.0 and >= 8.9.0