![\"Ubuntu\"](\"http:\/\/www.linuxsecurity.com\/images\/stories\/icons\/ubuntu-icon.gif\"){kind=icon}
<\/a>\nSeveral security issues were fixed in curl. ==========================================================================
\nUbuntu Security Notice USN-3805-2
\nNovember 01, 2018<\/p>\n
curl vulnerability
\n==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 12.04 ESM<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in curl.<\/p>\n
Software Description:
\n– curl: HTTP, HTTPS, and FTP client and client libraries<\/p>\n
Details:<\/p>\n
USN-3805-1 fixed a vulnerability in curl. This update provides
\nthe corresponding update for Ubuntu 12.04 ESM.<\/p>\n
Original advisory details:<\/p>\n
Brian Carpenter discovered that the curl command-line tool incorrectly
\nhandled error messages. A remote attacker could possibly use this
\nissue to obtain sensitive information. (CVE-2018-16842)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
\npackage versions:<\/p>\n
Ubuntu 12.04 ESM:
\ncurl 7.22.0-3ubuntu4.24
\nlibcurl3 7.22.0-3ubuntu4.24
\nlibcurl3-gnutls 7.22.0-3ubuntu4.24
\nlibcurl3-nss 7.22.0-3ubuntu4.24<\/p>\n
In general, a standard system update will make all the necessary
\nchanges.<\/p>\n
References:
\nhttps:\/\/usn.ubuntu.com\/usn\/usn-3805-2
\nhttps:\/\/usn.ubuntu.com\/usn\/usn-3805-1
\nCVE-2018-16842<\/p>\n