Ubuntu Security Update USN-7162-1: curl vulnerability

[LinuxBot]

Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations.

Continue reading...