Lucene search

K
mageiaGentoo FoundationMGASA-2014-0384
HistorySep 24, 2014 - 8:44 p.m.

Updated curl packages fix security vulnerabilities

2014-09-2420:44:28
Gentoo Foundation
advisories.mageia.org
13

0.006 Low

EPSS

Percentile

77.6%

Updated curl packages fix security vulnerabilities: In cURL before 7.38.0, libcurl can be fooled to both sending cookies to wrong sites and into allowing arbitrary sites to set cookies for others. For this problem to trigger, the client application must use the numerical IP address in the URL to access the site (CVE-2014-3613).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchcurl< 7.28.1-6.5curl-7.28.1-6.5.mga3