CVE-2024-38275 moodle: HTTP authorization header is preserved between "emulated redirects"

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs...

PT-2024-27914 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue concerns the cURL wrapper in Moodle, which retains original request headers when following redirects. This could lead to HTTP authorization header information being unintentionally...

OPENSUSE-SU-2024:10582-1 curl-7.79.1-1.1 on GA media

These are all security issues fixed in the curl-7.79.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13637-1 curl-8.6.0-1.1 on GA media

These are all security issues fixed in the curl-8.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12062-1 curl-7.83.1-1.1 on GA media

These are all security issues fixed in the curl-7.83.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12447-1 curl-7.86.0-1.1 on GA media

These are all security issues fixed in the curl-7.86.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13805-1 curl-8.7.1-1.1 on GA media

These are all security issues fixed in the curl-8.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12293-1 curl-7.85.0-1.1 on GA media

These are all security issues fixed in the curl-7.85.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12940-1 curl-8.1.0-1.1 on GA media

These are all security issues fixed in the curl-8.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12812-1 curl-8.0.1-1.1 on GA media

These are all security issues fixed in the curl-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13230-1 curl-8.3.0-1.1 on GA media

These are all security issues fixed in the curl-8.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13325-1 curl-8.4.0-1.1 on GA media

These are all security issues fixed in the curl-8.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13509-1 curl-8.5.0-1.1 on GA media

These are all security issues fixed in the curl-8.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12735-1 curl-7.88.1-1.1 on GA media

These are all security issues fixed in the curl-7.88.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12028-1 curl-7.83.0-1.1 on GA media

These are all security issues fixed in the curl-7.83.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12214-1 curl-7.84.0-1.1 on GA media

These are all security issues fixed in the curl-7.84.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13069-1 curl-8.2.0-1.1 on GA media

These are all security issues fixed in the curl-8.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10303-1 curl-7.51.0-1.1 on GA media

These are all security issues fixed in the curl-7.51.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12583-1 curl-7.87.0-1.1 on GA media

These are all security issues fixed in the curl-7.87.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: Vulnerabilities in libcurl, cURL and Linux Kernel might affect IBM Storage Copy Data Management

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in libcurl, cURL and Linux Kernel. Vulnerabilities include an attacker could exploit these vulnerabilities to overflow a buffer and execute arbitrary code on the system, to insert cookies at will into a running program, t...