33 matches found
USN-8487-2: curl regression
USN-8487-1 fixed vulnerabilities in curl. Unfortunately that update contained an incomplete fix for CVE-2026-8927. This update fixes the problem. Original advisory details: Andrew Nesbitt discovered that curl could reuse an existing live connection during STARTTLS-based connection upgrades even...
K000163073: curl vulnerability CVE-2026-8925
Security Advisory Description The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice. CVE-2026-8925 Impact There is no impact; F5 products are not affected by this...
Debian dla-4707 : gsasl - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4707 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4707-1 [email protected]...
openSUSE 16 Security Update : gsasl (openSUSE-SU-2026:21303-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21303-1 advisory. This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in gsaslntlmclientstep of the NTLM client c...
Security update for gsasl (important)
openSUSE security update: security update for gsasl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21303-1 Rating: important References: bsc1268885 Cross-References: CVE-2026-56968 CVSS scores: CVE-2026-56968 SUSE : 7.5...
SUSE-SU-2026:22631-1 Security update for gsasl
This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in gsaslntlmclientstep of the NTLM client can lead to memory disclosure bsc1268885...
OPENSUSE-SU-2026:21303-1 Security update for gsasl
This update for gsasl fixes the following issue - CVE-2026-56968: improper sanitization of a short challenge in gsaslntlmclientstep of the NTLM client can lead to memory disclosure bsc1268885...
SUSE CVE-2026-8925
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...
Double Free
Overview Affected versions of this package are vulnerable to Double Free in the GSASL context cleanup process. An attacker can cause arbitrary code execution or a denial of service by triggering the double-free condition. Remediation Upgrade libcurl to version 8.21.0 or higher. References - Curl...
CVE-2026-8925 SASL double-free
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...
CVE-2026-8925 SASL double-free
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...
CVE-2026-8925 SASL double-free
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...
CVE-2026-8925
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...
CVE-2026-8925: Double Free
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : curl vulnerabilities (USN-8487-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8487-1 advisory. Andrew Nesbitt discovered that curl could reuse an existing live connecti...
USN-8487-1: curl vulnerabilities
Andrew Nesbitt discovered that curl could reuse an existing live connection during STARTTLS-based connection upgrades even when the TLS configuration did not match. A remote attacker could possibly use this issue to cause curl to use an unintended TLS configuration. CVE-2026-8286 Muhamad Arga...
Security update for gsasl (important)
openSUSE security update: security update for gsasl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21004-1 Rating: important References: bsc1266371 Cross-References: CVE-2026-48829 CVSS scores: CVE-2026-48829 SUSE : 7.5...
CVE-2026-8925
The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...