cURL -- multiple vulnerabilitiesentered 2016-11-02
no CVE referenced
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| ftp/linux-c7-curl | linux-c7-curl | 7.29.0_13 | unaddressed | emulation@FreeBSD.org |
no CVE referenced
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>linux-c7-curl</name>
<range><lt>7.51.0</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>curl before version 7.51.0 uses outdated IDNA 2003 standard to handle
International Domain Names and this may lead users to potentially and
unknowingly issue network transfer requests to the wrong host.</p>
</body>
</description>
<references>
<cvename>CVE-2016-8625</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2016-8625</url>
</references>
<dates>
<discovery>2018-08-01</discovery>
<entry>2026-10-25</entry>
</dates>
</vuln>