RHEL 8 : curl (RHSA-2021:3582)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3582 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

Ubuntu 18.04 LTS : curl vulnerabilities (USN-5079-3)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5079-3 advisory. USN-5079-1 fixed vulnerabilities in curl. One of the fixes introduced a regression on Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the...

Photon OS 1.0: Curl PHSA-2021-1.0-0434

An update of the curl package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0434. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

Photon OS 2.0: Curl PHSA-2021-2.0-0392

An update of the curl package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0392. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

Critical Photon OS Security Update - PHSA-2021-3.0-0301

Updates of 'curl' packages of Photon OS have been released...

Man-In-The-Middle Attack (MitM)

curl is vulnerable to Man in the middle attack. The vulnerability exists due to a lack of clearing of previous cached responses, treating them as valid and authenticated...

Denial Of Service (DoS)

curl is vulnerable to denial of service. The vulnerability exists due to a use-after-free in the MQTT sending component of curl which kept a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0392

An update of 'curl' packages of Photon OS has been released...

Moderate Photon OS Security Update - PHSA-2021-0392

Updates of 'curl' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2021-0434

Updates of 'curl' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2021-0301

Updates of 'curl' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2021-0102

Updates of 'curl' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0434

An update of 'curl' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2021-4.0-0102

Updates of 'krb5', 'curl' packages of Photon OS have been released...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.79.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: clear the leftovers pointer when sending...

Ubuntu: Security Advisory (USN-5079-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 14.0 / 14.1 / 14.2 / current curl Multiple Vulnerabilities (SSA:2021-258-01)

The version of curl installed on the remote host is prior to 7.79.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2021-258-01 advisory. - When curl = 7.20.0 and = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP...

Vulnerabilities fixed in curl

Vulnerabilities have been fixed in curl. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Accessing sensitive data Updates have been released to fix the vulnerabilities. More...

Amazon Linux 2 : curl, --advisory ALAS2-2021-1700 (ALAS-2021-1700)

The version of curl installed on the remote host is prior to 7.76.1-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1700 advisory. A flaw was found in curl in the way curl handles a file hash mismatch after downloading content using the Metalink feature...

USN-5079-2: curl vulnerabilities

USN-5079-1 fixed several vulnerabilities in curl. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Patrick Monnerat discovered that curl incorrectly handled upgrades to TLS. When receiving certain responses from servers, curl woul...