When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Mar 26, 2024 | Dec 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade curlUpgrade curl-debuginfoUpgrade libcurl | Jan 10, 2024 | Dec 12, 2023 |
| Amazon_linux_2023 | — | Upgrade curl-minimalUpgrade curlUpgrade curl-debuginfoUpgrade libcurl-develUpgrade libcurl-debuginfoUpgrade libcurlUpgrade curl-debugsourceUpgrade libcurl-minimal-debuginfoUpgrade curl-minimal-debuginfoUpgrade libcurl-minimal | Feb 17, 2025 | Dec 6, 2023 |
| Debian | — | Upgrade curl | Jul 30, 2024 | Dec 12, 2023 |
| F5 Big Ip | — | — | Mar 7, 2024 | Dec 12, 2023 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Sep 24, 2024 | Dec 12, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade curlUpgrade libcurl | Mar 13, 2024 | Dec 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libcurlUpgrade curl | Mar 13, 2024 | Dec 12, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade curlUpgrade libcurl | May 31, 2024 | Dec 12, 2023 |
| Suse | — | Upgrade libcurl4Upgrade libcurl-develUpgrade curlUpgrade libcurl-devel-32bitUpgrade libcurl4-32bit | Dec 7, 2023 | Dec 6, 2023 |
| Ubuntu | — | Upgrade curlUpgrade libcurl3-gnutlsUpgrade libcurl4Upgrade libcurl3-nss | Dec 8, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub