Security update for curl

This update for curl fixes the following issues: CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...

SUSE-SU-2024:4359-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : curl vulnerability (USN-7162-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7162-1 advisory. Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain...

Ubuntu: Security Advisory (USN-7162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7162-1 curl vulnerability

Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations...

USN-7162-1: curl vulnerability

Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations...

The vulnerability of the cURL command-line utility’s netrc-file handlers allows a hacker to gain access to user credentials.

The vulnerability of the cURL command-line utility’s netrc-file handlers is related to insufficient protection of operational data. Exploiting this vulnerability can allow a remote attacker to gain access to credentials, provided that the HTTP redirection leads to another resource...

SUSE SLES12 Security Update : curl (SUSE-SU-2024:4284-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4284-1 advisory. - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068 Tenable has...

MAL-2024-11821 Malicious code in pipedream-curl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in pipedream-curl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

OPENSUSE-SU-2024:14575-1 curl-8.11.1-1.1 on GA media

These are all security issues fixed in the curl-8.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2024:4288-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4288-1 advisory. - CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain...

CVE-2024-11053

A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host. Mitigation Avoid usin...

SUSE CVE-2024-11053

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...

Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities

Summary There are vulnerabilities in Open-Source Software OSS components consumed by IBM Cognos Dashboards on Cloud Pak for Data. Please refer to the Related Information section below for vulnerability impact. This Security Bulletin relates only to the direct usage of third-party components by IB...

openSUSE Security Advisory (SUSE-SU-2024:4288-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2948)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2978)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2933)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:4284-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...