1 matches found
AZL-54240 CVE-2024-11053 affecting package mysql for versions less than 8.0.41-1
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...