diff -Nru curl-7.88.1/debian/changelog curl-7.88.1/debian/changelog --- curl-7.88.1/debian/changelog 2024-03-29 17:30:11.000000000 +0000 +++ curl-7.88.1/debian/changelog 2024-03-29 17:42:54.000000000 +0000 @@ -1,3 +1,9 @@ +curl (7.88.1-11+16.04.sav4) xenial; urgency=medium + + * debian/patches/CVE-2024-2398.patch: Fix patch for Curl 7.88.1 + + -- Rob Savoury Fri, 29 Mar 2024 10:42:54 -0700 + curl (7.88.1-11+16.04.sav3) xenial; urgency=medium * SECURITY UPDATE: HTTP/2 push headers memory-leak diff -Nru curl-7.88.1/debian/patches/CVE-2024-2398.patch curl-7.88.1/debian/patches/CVE-2024-2398.patch --- curl-7.88.1/debian/patches/CVE-2024-2398.patch 2024-03-29 17:29:40.000000000 +0000 +++ curl-7.88.1/debian/patches/CVE-2024-2398.patch 2024-03-29 17:42:27.000000000 +0000 @@ -78,7 +78,7 @@ - stream->push_headers = NULL; - } - -+ free_push_headers(http); ++ free_push_headers(stream); if(!ctx || !ctx->h2) return;