RHSA-2015:2159Medium

Red Hat Security Advisory: curl security, bug fix, and enhancement update

Published
November 19, 2015
Last Modified
June 27, 2026

🔗 CVE IDs covered (5)

CVE-2014-3613 →CVE-2014-3707 →CVE-2014-8150 →CVE-2015-3143 →CVE-2015-3148 →

📋 Description

CVE-2014-3613 — curl: incorrect handling of IP addresses in cookie domain CVE-2014-3707 — curl: incorrect handle duplication after COPYPOSTFIELDS CVE-2014-8150 — curl: URL request injection vulnerability in parseurlandfillconn() CVE-2015-3143 — curl: re-using authenticated connection when unauthenticated CVE-2015-3148 — curl: Negotiate not treated as connection-oriented

🔗 References (14)