Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-17523

Критический

ALT-PU-2024-17523: package curl update to version 8.11.1-alt1

Источник
errata.altlinux.org
Дата публикации
28.12.2024
Дата обновления
28.12.2024
Устраненные уязвимости
2

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades curl to version 8.11.1-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 3.4
ubuntu
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CVSS3: 5.9
redhat
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CVSS3: 3.4
nvd
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CVSS3: 3.4
msrc
почти 2 года назад

netrc and redirect credential leak

CVSS3: 3.4
debian
почти 2 года назад

When asked to both use a `.netrc` file for credentials and to follow H ...