Debian/curl: low 3.4
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw
Action: Upgrade curl to 8.11.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.11.1-1 | - |
Fixed versions
| 8.11.1-1 |
Sources
- osv: DEBIAN-CVE-2024-11053#Debian:13/curl
- https://security-tracker.debian.org/tracker/CVE-2024-11053
published · modified · JSON