The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.
This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mecabUpgrade mysql-serverUpgrade mysql-develUpgrade mecab-develUpgrade mysql-testUpgrade mysqlUpgrade mysql-commonUpgrade mysql-errmsgUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mecab-ipadic | Feb 21, 2025 | Dec 11, 2024 |
| Alpine Linux | — | Upgrade curl | Aug 8, 2025 | Dec 11, 2024 |
| Amazon_linux_2023 | — | Upgrade libcurl-develUpgrade curl-debuginfoUpgrade libcurlUpgrade libcurl-debuginfoUpgrade curl-minimalUpgrade libcurl-minimalUpgrade curl-debugsourceUpgrade libcurl-minimal-debuginfoUpgrade curlUpgrade curl-minimal-debuginfo | Jan 12, 2026 | Dec 11, 2024 |
| Debian | — | Upgrade curl | Mar 17, 2025 | Dec 11, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade curlUpgrade libcurl | Apr 11, 2025 | Dec 11, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade curlUpgrade libcurl | Mar 19, 2025 | Dec 11, 2024 |
| Ibm Aix | — | Apply the fix or workaround for curl_advisory7 | Nov 6, 2025 | Jun 4, 2025 |
| Oracle Httpserver | — | Apply patch 37677581 to Oracle HTTP Server 12.2.1.4.0.Apply patch 37658370 to Oracle HTTP Server 14.1.2.0.0. | Sep 30, 2026 | Dec 11, 2024 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.4Upgrade to MySQL version 9.2.0Upgrade to MySQL version 8.0.41 | Jan 22, 2025 | Dec 11, 2024 |
| Oracle_linux | — | Upgrade mecab-develUpgrade mysqlUpgrade mecabUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mysql-testUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-develUpgrade mysql-commonUpgrade mysql-server | Feb 25, 2025 | Dec 11, 2024 |
| Redhat_linux | — | Upgrade mysql-develUpgrade mecab-develUpgrade mecab-ipadicUpgrade mysql-devel-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mecab-debugsourceUpgrade mysql-serverUpgrade mysql-debugsourceUpgrade mecab-debuginfoUpgrade mysql-debuginfoNo solution existsUpgrade mysql-test-debuginfoUpgrade mysql-testUpgrade mysqlUpgrade mysql-libs-debuginfoUpgrade mysql-errmsgUpgrade mysql-commonUpgrade mecab | Feb 20, 2025 | Dec 11, 2024 |
| Rocky_linux | — | Upgrade mysql-libs-debuginfoUpgrade mecab-develUpgrade mysql-testUpgrade mecab-debugsourceUpgrade mysql-errmsgUpgrade mysqlUpgrade mysql-serverUpgrade mysql-debugsourceUpgrade mysql-devel-debuginfoUpgrade mecabUpgrade mysql-develUpgrade mecab-ipadic-EUCJPUpgrade mecab-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-libsUpgrade mecab-ipadicUpgrade mysql-debuginfoUpgrade mysql-common | Feb 27, 2025 | Dec 11, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.3.5 | Jul 30, 2026 | Dec 11, 2024 |
| Suse | — | Upgrade curl-zsh-completionUpgrade libcurl-develUpgrade curlUpgrade libcurl-mini4Upgrade libcurl4-32bitUpgrade libcurl-devel-32bitUpgrade libcurl-devel-docUpgrade libcurl4 | Dec 31, 2024 | Dec 11, 2024 |
| Ubuntu | — | Upgrade libcurl4-openssl-devUpgrade libcurl4-gnutls-dev (Ubuntu Pro)Upgrade libcurl4Upgrade libcurl4 (Ubuntu Pro)Upgrade curlUpgrade libcurl3-nssUpgrade libcurl4-nss-dev (Ubuntu Pro)Upgrade libcurl3-nss (Ubuntu Pro)Upgrade libcurl3-gnutls (Ubuntu Pro)Upgrade libcurl4t64Upgrade libcurl3-gnutlsUpgrade libcurl4-openssl-dev (Ubuntu Pro)Upgrade libcurl3 (Ubuntu Pro)Upgrade libcurl4-gnutls-devUpgrade curl (Ubuntu Pro)Upgrade libcurl3t64-gnutls | Dec 17, 2024 | Dec 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Dec 11, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub