10815 matches found
curl: CVE-2021-22923: Metalink download sends credentials
Summary: When compiled --with-libmetalink and used with --metalink and --user curl will use the credentials for any further transfers performed. This includes different hosts and protocols, even ones without transport layer security such as http and ftp. As a result the credentials only intended...
curl: CVE-2021-22922: Wrong content via metalink not discarded
Summary: When compiled --with-libmetalink and used with --metalink curl does check the cryptographics hash of the downloaded files. However, the only indication that the hash was incorrect is a message displayed to the user. The files with incorrect hashes are left to the disk as-is. Since curl...
openSUSE: Security Advisory for curl (openSUSE-SU-2021:0808-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Photon OS 2.0: Curl PHSA-2021-2.0-0349
An update of the curl package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0349. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...
OPENSUSE-SU-2021:0808-1 Security update for curl
This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. - Allow partial chain verification jscSLE-17956 Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA...
Security update for curl (moderate)
openSUSE Security Update: Security update for curl Announcement ID: openSUSE-SU-2021:0808-1 Rating: moderate References: 1186114 SLE-17956 Cross-References: CVE-2021-22898 CVSS scores: CVE-2021-22898 SUSE: 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 An...
Information Disclosure
curl is vulnerable to information disclosure. The vulnerability exists in -t command line in CURLOPTTELNETOPTIONS because the option parser for sending NEWENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server which allows an attacker to...
[SECURITY] Fedora 34 Update: curl-7.76.1-3.fc34
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Photon OS 3.0: Curl PHSA-2021-3.0-0243
An update of the curl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0243. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0349
An update of 'gnutls', 'curl', 'dhcp', 'nginx' packages of Photon OS has been released...
Vulnerability fixed in cURL
A vulnerability has been fixed in cURL. A malicious person at remote user could potentially exploit the vulnerability to cause a denial-of-service or execute arbitrary code with the application's permissions. To do this, the malicious party needs to entice a victim to execute a cURL request towar...
Photon OS 1.0: Curl PHSA-2021-1.0-0393
An update of the curl package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0393. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...
Critical Photon OS Security Update - PHSA-2021-0349
Updates of 'dhcp', 'gnutls', 'curl', 'nginx' packages of Photon OS have been released...
SUSE-SU-2021:1786-1 Security update for curl
This update for curl fixes the following issues: - CVE-2021-22898: TELNET stack contents disclosure bsc1186114 - CVE-2021-22876: The automatic referer leaks credentials bsc1183933 - CVE-2020-8286: Inferior OCSP verification bsc1179593 - CVE-2020-8285: FTP wildcard stack overflow bsc1179399 -...
SUSE SLES12 Security Update : curl (SUSE-SU-2021:1763-1)
This update for curl fixes the following issues : CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. Allow partial chain verification jscSLE-17956 - Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2021:1762-1)
This update for curl fixes the following issues : CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. Allow partial chain verification jscSLE-17956 - Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA...
Important Photon OS Security Update - PHSA-2021-3.0-0243
Updates of 'nginx', 'linux', 'linux-rt', 'curl' packages of Photon OS have been released...
Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2021-146-01)
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-146-01. The text itself is copyrigh...