Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Debian: DLA-2734-1 Critical: Curl Info Exposure And Reuse Issues

debian lts
Calendar Grey August 13, 2021
Dist Debian Esm H88
Recent update on Debian LTS Advisory DLA-2734-1 concerning security flaws in curl. Implementations rectified. Take immediate action!
Several vulnerabilities were fixed in curl, a client-side URL transfer library
Topics%20covered

Topics Covered

security advisory debian critical severity information disclosure curl connection reuse url transfer

Summary

CVE-2021-22898

Information disclosure in connection to telnet servers.

CVE-2021-22924

Bad connection reuse due to flawed path name checks.

For Debian 9 stretch, these problems have been fixed in version
7.52.1-5+deb9u15.

We recommend that you upgrade your curl packages.

For the detailed security status of curl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/curl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: curl
Version: 7.52.1-5+deb9u15
CVE ID: CVE-2021-22898 CVE-2021-22924
Debian Bug: 989228 991492

Topics%20covered

Topics Covered

security advisory debian critical severity information disclosure curl connection reuse url transfer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here