THREATIST.IORead the docs security update Logging for Red Hat OpenShift - 5.6.18
Released 2024-05-01 · Red Hat rating Moderate · View on Red Hat →
This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible.
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFI…
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met.