Debian/curl: low 3.7
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when
Action: Upgrade curl to 7.88.1-10 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.88.1-10 | - |
Fixed versions
| 7.88.1-10 |
Sources
- osv: DEBIAN-CVE-2023-28322#Debian:14/curl
- https://security-tracker.debian.org/tracker/CVE-2023-28322
published · modified · JSON