Curl v8.4.0 Addresses High-Severity Issue
Curl project maintainers have now released curl v8.4.0, which fixes vulnerabilities found in the widely used data transfer tool, along with an advisory detailing the issues.
Lead developer Daniel Stenberg noted that this release cycle was cut short in order to quickly address the high-severity vulnerability (CVE-2023-38545), which “makes curl overflow a heap-based buffer in the SOCKS5 proxy handshake.”
The vulnerability affects both curl and libcurl from version 7.69.0 up to (and including) v8.3.0. Users are advised to upgrade now.
10/11/2023
Related content
- High-Severity OpenSSL Security Advisory Released
- Datadog Report Examines DevSecOps Best Practices
- Dangerous New Attack Could Compromise One Third of All HTTPS Servers
-
News for Admins
News for system administrators around the world. -
Cloud security with AWS GuardDuty
AWS GuardDuty uses machine learning and threat intelligence to identify malicious activity for continuous security monitoring in the cloud.