curl - security update

Fixed packages 1

Vulnerabilities 8

• High 7.8
  CVE-2020-8177

  curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead t…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• High 7.5
  CVE-2020-8285

  curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildca…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Medium 5.3
  CVE-2021-22876

  curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Act…

  curl curl curl Debian Ubuntu Alpine
  Apr 1, 2021
• Medium 4.3
  CVE-2021-22890

  curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due…

  curl curl curl Debian Ubuntu Alpine
  Apr 1, 2021
• Low 3.7
  CVE-2020-8284

  A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP ad…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Unscored —
  CVE-2020-8169

  curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Unscored —
  CVE-2020-8231

  Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Unscored —
  CVE-2020-8286

  curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificati…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020