CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the 1 IMAP, 2 POP3, or 3 SMTP protocol...

Security fix for the ALT Linux 6 package curl version 7.21.7-alt1

June 27, 2011 Gleb Fotengauer-Malinovskiy 7.21.7-alt1 - new version CVE-2011-2192...

Security fix for the ALT Linux 6 package curl version 7.19.6-alt1

Aug. 13, 2009 Anton Farygin 7.19.6-alt1 - new version CVE-2009-2417...

Security fix for the ALT Linux 6 package curl version 7.19.4-alt1

March 3, 2009 Anton Farygin 7.19.4-alt1 - new version CVE-2009-0037...

Security fix for the ALT Linux 8 package curl version 7.16.4-alt1

July 11, 2007 Anton Farygin 7.16.4-alt1 - new version with security fixes CVE-2007-3564 - disabled kerberos support by requiest from krb5 mantainer...

[SECURITY] New version of curl fixes buffer overflow (update)

Package : curl and curl-ssl Problem type : remote exploit Debian-specific: no The first release of this advisory listed a wrongly compiled curl package for i386; this has been replaced with version 6.0-1.1.1 . The version of curl a tool to retrieve files using ftp, gover or http as distributed wi...