Skip to content
OpenAdvisories
Unscored DSA-4098-1 1 CVE

curl - security update

Published Jan 26, 2018 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 8 curl 7.38.0-4+deb8u9
Debian · 9 curl 7.52.1-5+deb9u4

Vulnerabilities 1

  • Unscored —

    libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom head…