Affected: Alpaquita:25: curl, Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

curl-8.19.0-1.1 on GA media

curl: libcurl: Curl out of bounds read for cookie path curl: predictable WebSocket mask curl: Curl missing SFTP host verification with wolfSSH backend curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token curl: libcurl: Improper certificate validation due to cached TLS settings reuse curl: Host verification bypass during SSH transfers curl: libssh key passphrase bypass without agent set curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect curl: curl: Unauthorized access due to improper HTTP proxy connection reuse curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

Security update for curl

Affected: Ubuntu:25.10: curl

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.