Unscored DSA-2902-1 2 CVEs

curl - security update

Published Apr 13, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 6.0	curl	7.21.0-2.1+squeeze8
Debian · 7	curl	7.26.0-1+wheezy9

Vulnerabilities 2

Unscored —

CVE-2014-0138

The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) …

curl curl Debian Alpine

Apr 15, 2014
Unscored —

CVE-2014-0139

cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildc…

curl curl Debian Alpine

Apr 15, 2014