When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Mar 26, 2024 | Dec 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade curl-debuginfoUpgrade curlUpgrade libcurl-develUpgrade libcurl | Jan 10, 2024 | Dec 12, 2023 |
| Amazon_linux_2023 | — | Upgrade libcurl-minimal-debuginfoUpgrade libcurl-minimalUpgrade curl-minimal-debuginfoUpgrade curl-debugsourceUpgrade libcurl-debuginfoUpgrade libcurlUpgrade curl-debuginfoUpgrade libcurl-develUpgrade curl-minimalUpgrade curl | Feb 17, 2025 | Dec 6, 2023 |
| Debian | — | Upgrade curl | Jul 30, 2024 | Dec 12, 2023 |
| F5 Big Ip | — | — | Mar 7, 2024 | Dec 12, 2023 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Sep 24, 2024 | Dec 12, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libcurlUpgrade curl | Mar 13, 2024 | Dec 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libcurlUpgrade curl | Mar 13, 2024 | Dec 12, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libcurlUpgrade curl | May 31, 2024 | Dec 12, 2023 |
| Suse | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl4Upgrade libcurl-devel-32bitUpgrade libcurl4-32bit | Dec 7, 2023 | Dec 6, 2023 |
| Ubuntu | — | Upgrade libcurl3-nssUpgrade libcurl4Upgrade curlUpgrade libcurl3-gnutls | Dec 8, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub