Errata ID | 339 |
---|---|
Date | 2015-06-17 |
Source package | curl |
Fixed in version | 7.21.0-7.53.201506031709 |
Description | These vulnerabilities have been fixed in curl: * Information leak in curl_easy_duphandle() (CVE-2014-3707) * Re-using authenticated connection when unauthenticated (CVE-2015-3143) * Negotiate not treated as connection-oriented (CVE-2015-3148) * Fix URL request injection (CVE-2014-8150) |
Additional notes | |
CVE ID | CVE-2014-3707 CVE-2014-8150 CVE-2015-3143 CVE-2015-3148 |
UCS Bug number | #36468 |