Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#43379 - [curl] CVE-2014-8150: URL request injection
Attached to Project:
Arch Linux
Opened by Remi Gacogne (rgacogne) - Thursday, 08 January 2015, 10:10 GMT
Last edited by Dave Reisner (falconindy) - Thursday, 08 January 2015, 16:00 GMT
Opened by Remi Gacogne (rgacogne) - Thursday, 08 January 2015, 10:10 GMT
Last edited by Dave Reisner (falconindy) - Thursday, 08 January 2015, 16:00 GMT
|
DetailsA security advisory has been published [1] regarding a URL request injection in curl < 7.40.
[1]: http://curl.haxx.se/docs/adv_20150108B.html |
This task depends upon
Closed by Dave Reisner (falconindy)
Thursday, 08 January 2015, 16:00 GMT
Reason for closing: Fixed
Additional comments about closing: curl-7.40.0 in testing
Thursday, 08 January 2015, 16:00 GMT
Reason for closing: Fixed
Additional comments about closing: curl-7.40.0 in testing