GHSA-6295-5J29-3CC8 vulnerabilities

Vulnerabilities for packages: curl...

GHSA-GRFR-78M7-Q35Q vulnerabilities

Vulnerabilities for packages: curl...

GHSA-25M2-MPQ4-29VH vulnerabilities

Vulnerabilities for packages: curl...

GHSA-GV3V-X3F3-7FXM vulnerabilities

Vulnerabilities for packages: curl...

GHSA-H288-5FQ8-5PFW vulnerabilities

Vulnerabilities for packages: curl...

GHSA-VVQH-CQPJ-5537 vulnerabilities

Vulnerabilities for packages: curl...

GHSA-FJ44-3XPP-9CX2 vulnerabilities

Vulnerabilities for packages: curl...

GHSA-697H-9H25-W4FM vulnerabilities

Vulnerabilities for packages: curl...

GHSA-9XR6-QF7M-2JV5 vulnerabilities

Vulnerabilities for packages: curl...

GHSA-97C4-2W4V-C7R8 vulnerabilities

Vulnerabilities for packages: curl...

openSUSE Security Advisory (SUSE-SU-2024:2784-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate Photon OS Security Update - PHSA-2025-5.0-0479

Updates of 'curl' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0479

Updates of 'curl' packages of Photon OS have been released...

AlmaLinux 8 : mysql:8.0 (ALSA-2025:1673)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1673 advisory. openssl: SSLselectnextproto buffer overread CVE-2024-5535 krb5: GSS message token handling CVE-2024-37371 curl: libcurl: ASN.1 date parser overread...

curl: curl doesn't hide credentials in /proc/XXX/cmdline provided via CLI arguments

Summary: cleanarg helper func doesn't work, when credentials are provided without a whitespace to a short options flag, e.g. -uUSER:PASS vs -u USER:PASS or -UUSER:PASS vs -U UUSER:PASS Affected version curl -V curl 8.12.1 x8664-pc-linux-musl libcurl/8.12.1 OpenSSL/3.3.3 zlib/1.3.1 brotli/1.1.0...

curl: curl netrc password leak

A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host...

Important: Red Hat Security Advisory: mysql security update

An update for mysql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

curl: libcurl: ASN.1 date parser overread

A flaw was found in libcurl, where libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the time fraction, leading to a strlen performed on a pointer to a heap...

curl: curl netrc password leak

A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host...

RHEL 8 : mysql:8.0 (RHSA-2025:1673)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:1673 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...