Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-16919

Критический

ALT-PU-2024-16919: package curl update to version 8.11.1-alt1

Источник
errata.altlinux.org
Дата публикации
19.12.2024
Дата обновления
19.12.2024
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades curl to version 8.11.1-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 3.4
ubuntu
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CVSS3: 5.9
redhat
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CVSS3: 3.4
nvd
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CVSS3: 3.4
msrc
почти 2 года назад

netrc and redirect credential leak

CVSS3: 3.4
debian
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow H ...