Description:
curl is susceptible to an out-of-bounds read in the cookie handler that
could either cause a crash or potentially make allow a clear-text site
to override the contents of a secure cookie. This release also fixes a
rare memory leak in HTTP trailers.
- https://bugs.mageia.org/show_bug.cgi?id=34623
- https://curl.se/docs/CVE-2025-9086.html
- https://www.cve.org/CVERecord?id=CVE-2025-9086
- 9/core/curl-7.88.1-4.8.mga9
Get the latest Linux and open source security news straight to your inbox.