Security fix for the ALT Linux 8 package curl version 7.64.0-alt1

7.64.0-alt1 built Feb. 8, 2019 Anton Farygin in task 220788 Feb. 6, 2019 Anton Farygin - 7.64.0 - fixes: CVE-2018-16890: NTLM type-2 out-of-bounds buffer read CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow CVE-2019-3823: SMTP end-of-response out-of-bounds read...

Photon OS 1.0: Curl PHSA-2018-1.0-0186

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0186. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121889;...

Photon OS 2.0: Curl PHSA-2018-2.0-0016

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0016. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121916;...

Photon OS 1.0: Curl PHSA-2018-1.0-0124

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0124. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121819;...

Photon OS 1.0: Curl PHSA-2017-0044

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0044. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121756;...

Photon OS 1.0: Curl PHSA-2018-1.0-0158

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0158. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121855;...

Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2019-037-01)

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-037-01. The text itself is copyright C Slackware Linux,...

Debian DSA-4386-1 : curl - security update

Multiple vulnerabilities were discovered in cURL, an URL transfer library. - CVE-2018-16890 Wenxiang Qian of Tencent Blade Team discovered that the function handling incoming NTLM type-2 messages does not validate incoming data correctly and is subject to an integer overflow vulnerability, which...

Photon OS 2.0: Curl PHSA-2018-2.0-0009

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121901;...

Photon OS 2.0: Curl PHSA-2018-2.0-0096

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121995;...

Photon OS 2.0: Curl PHSA-2018-2.0-0068

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0068. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121963;...

Photon OS 1.0: Curl PHSA-2017-1.0-0095

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-1.0-0095. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121784;...

Photon OS 1.0: Curl PHSA-2019-1.0-0203

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0203. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122015;...

Photon OS 1.0: Curl PHSA-2018-1.0-0108

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0108. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121808;...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2019:0249-1)

This update for curl fixes the following issues : Security issues fixed : CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP bsc1123378. CVE-2019-3822: Fixed a stack-based buffer overflow in the function creating an outgoing NTLM type-3 message...

Photon OS 2.0: Curl PHSA-2017-0050

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0050. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121768;...

Medium: curl

Issue Overview: setfilemetadata in xattr.c in GNU Wget stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : curl vulnerabilities (USN-3882-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3882-1 advisory. Wenxiang Qian discovered that curl incorrectly handled certain NTLM authentication messages. A remote attacker could possibly use...

Ubuntu: Security Advisory (USN-3882-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 2.0: Curl PHSA-2017-0045

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0045. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121761;...