10859 matches found
Vulnerabilities fixed in cURL
Vulnerabilities have been fixed in cURL. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Accessing system data GNU has released updates to fix the vulnerabilities. More...
Important Photon OS Security Update - PHSA-2020-0174
Updates of 'curl', 'linux-rt', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:3735-1)
This update for curl fixes the following issues : CVE-2020-8286: Fixed improper OSCP verification in the client side bsc1179593. CVE-2020-8285: Fixed a stack overflow due to FTP wildcard bsc1179399. CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different I...
Important Photon OS Security Update - PHSA-2020-0346
Updates of 'curl' packages of Photon OS have been released...
Ubuntu: Security Advisory (USN-4665-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2020-344-01)
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-344-01. The text itself is copyright C Slackware Linux,...
Photon OS 3.0: Curl PHSA-2020-3.0-0174
An update of the curl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0174. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144069;...
FreeBSD : cURL -- Multiple vulnerabilities (3c77f139-3a09-11eb-929d-d4c9ef517024)
The cURL project reports : Trusting FTP PASV responses CVE-2020-8284 FTP wildcard stack overflow CVE-2020-8285 Inferior OCSP verification CVE-2020-8286 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrigh...
Photon OS 2.0: Curl PHSA-2020-2.0-0304
An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0304. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144072;...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0304
An update of 'curl', 'openssl' packages of Photon OS has been released...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:3733-1)
This update for curl fixes the following issues : CVE-2020-8286: Fixed improper OSCP verification in the client side bsc1179593. CVE-2020-8285: Fixed a stack overflow due to FTP wildcard bsc1179399. CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different I...
Important Photon OS Security Update - PHSA-2020-3.0-0174
Updates of 'linux-aws', 'curl', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...
[slackware-security] curl
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.74.0-i586-1slack14.2.txz: Upgraded. This release includes the following security related bugfixes: Inferior OCSP...
CVE-2020-8284
A malicious server can use the PASV response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If cu...
SUSE-SU-2020:3735-1 Security update for curl
This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side bsc1179593. - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard bsc1179399. - CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a...
SUSE-SU-2020:3733-1 Security update for curl
This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side bsc1179593. - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard bsc1179399. - CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a...
USN-4665-2 curl vulnerabilities
USN-4665-1 fixed several vulnerabilities in curl. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Varnavas Papaioannou discovered that curl incorrectly handled FTP PASV responses. An attacker could possibly use this issue to tric...
USN-4665-1: curl vulnerabilities
Marc Aldorasi discovered that curl incorrectly handled the libcurl CURLOPTCONNECTONLY option. This could result in data being sent to the wrong destination, possibly exposing sensitive information. This issue only affected Ubuntu 20.10. CVE-2020-8231 Varnavas Papaioannou discovered that curl...
USN-4665-1 curl vulnerabilities
Marc Aldorasi discovered that curl incorrectly handled the libcurl CURLOPTCONNECTONLY option. This could result in data being sent to the wrong destination, possibly exposing sensitive information. This issue only affected Ubuntu 20.10. CVE-2020-8231 Varnavas Papaioannou discovered that curl...