MGASA-2025-0123
Advisory lineage Upstream: 3 Downstream: 0
Published: 03 Apr 2025, 01:36
Last modified:16 Apr 2026, 04:21
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
03 Apr 2025, 01:36
Published
Vulnerability first disclosed
16 Apr 2026, 04:21
Last Modified
Vulnerability information updated
Description
Updated curl packages fix security vulnerabilities When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. The fix was included previously as part of MGAA-2025-0004.
Affected Systems
- mageia•curl
< 7.88.1-4.6.mga9