security update for curl
security update for curl
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-9086US | — | — | ||
1. A cookie is set using the `secure` keyword for `https://target`
2. curl is redirected to or otherwise made to speak with `http://target` (same
hostname, but using clear text… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- Fixedcurl-0:7.76.1-35.el9_7.3.x86_64 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-minimal-0:7.76.1-35.el9_7.3.x86_64 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-0:7.76.1-35.el9_7.3.i686 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-0:7.76.1-35.el9_7.3.x86_64 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-devel-0:7.76.1-35.el9_7.3.i686 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-devel-0:7.76.1-35.el9_7.3.x86_64 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-minimal-0:7.76.1-35.el9_7.3.i686 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-minimal-0:7.76.1-35.el9_7.3.x86_64 as component of SUSE Liberty Linux 9
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan