security update for curl
security update for curl
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-9086US | — | — | ||
1. A cookie is set using the `secure` keyword for `https://target`
2. curl is redirected to or otherwise made to speak with `http://target` (same
hostname, but using clear text… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- Fixedcurl-0:8.12.1-2.el10_1.2.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-0:8.12.1-2.el10_1.2.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-devel-0:8.12.1-2.el10_1.2.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl-minimal-0:8.12.1-2.el10_1.2.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan