MGASA-2024-0099
Advisory lineage Upstream: 4 Downstream: 0
Published: 29 Mar 2024, 03:49
Last modified:16 Apr 2026, 04:22
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
29 Mar 2024, 03:49
Published
Vulnerability first disclosed
16 Apr 2026, 04:22
Last Modified
Vulnerability information updated
Description
Updated curl packages fix security vulnerabilities CVE-2024-2004: Usage of disabled protocol If all protocols are disabled at run-time with none being added, curl/libcurl would still allow communication with the default set of allowed protocols, including some that are unencrypted. CVE-2024-2398: HTTP/2 push headers memory-leak A memory leak could occur when an application enabled HTTP/2 server push and the server sent a large number of headers.
Affected Systems
- mageia•curl
< 7.88.1-4.3.mga9