cURL: Multiple vulnerabilities

cURL: Multiple vulnerabilities Multiple vulnerabilities have been found in cURL, the worst of which may lead to arbitrary code execution. curl 2020-03-15 2020-03-15 686050 694020 remote 7.66.0 7.66.0

A command line tool and library for transferring data with URLs.

Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details.

A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

There is no known workaround at this time.

All cURL users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-misc/curl-7.66.0"

CVE-2019-5435 CVE-2019-5436 CVE-2019-5481 CVE-2019-5482 whissi whissi