Updated curl packages fix security vulnerabilities

🗓️ 03 Apr 2025 01:36:32Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 12 Views

Updated curl packages resolve credential leakage during HTTP redirects with fixed vulnerabilities.

Reporter	Title	Published	Views	Family All 223
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	28 Aug 202521:17	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to sensitive information disclosure (CVE-2025-0167, CVE-2024-11053) and a denial of service (CVE-2024-9681) due to cURL libcurl	10 Jun 202514:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	28 Aug 202521:18	–	ibm
ATTACKERKB	CVE-2025-0665	5 Feb 202510:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2025-1351)	8 Jan 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2025-1357)	8 Jan 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ecs-service-connect-agent, --advisory ALAS2ECS-2025-093 (ALASECS-2025-093)	5 Jan 202600:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: curl / mysql (CVE-2025-0167)	13 Apr 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: curl / mysql (CVE-2025-0665)	11 Jul 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: curl / mysql (CVE-2025-0725)	21 Feb 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	9	any	curl	7.88.1-4.6	curl-7.88.1-4.6.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
bugs	www.bugs.mageia.org/show_bug.cgi
curl	www.curl.se/docs/CVE-2025-0167.html
advisories	www.advisories.mageia.org/MGAA-2025-0004.html

16 Jan 2025 07:14Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.3

EPSS0.01168

SSVC

curl packages security vulnerabilities credential leakage http redirects fix included