New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.

- fix cookie injection for other servers (CVE-2016-8615)

  - compare user/passwd case-sensitively while reusing     connections (CVE-2016-8616)

  - base64: check for integer overflow on large input     (CVE-2016-8617)

  - fix double-free in krb5 code (CVE-2016-8619)

  - fix double-free in curl_maprintf() (CVE-2016-8618)

  - fix glob parser write/read out of bounds (CVE-2016-8620)

  - fix out-of-bounds read in curl_getdate() (CVE-2016-8621)

  - fix URL unescape heap overflow via integer truncation     (CVE-2016-8622)

  - fix use-after-free via shared cookies (CVE-2016-8623)

  - urlparse: accept '#' as end of host name (CVE-2016-8624)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1401 advisory.

    This advisory aggregates security fixes for the curl SRPM in CIQ LTS 9.6. It addresses 148 CVEs:
    CVE-2023-32001, CVE-2022-27775, CVE-2018-1000005, CVE-2022-27774, CVE-2022-32221, and 143 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
94516	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : curl (SSA:2016-308-01)	Nessus	Slackware Local Security Checks	11/4/2016	1/20/2026	critical
94592	Fedora 24 : curl (2016-e8e8cdb4ed)	Nessus	Fedora Local Security Checks	11/7/2016	1/20/2026	critical
353701	Rocky Linux 9.6 [CIQ] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ciqsa-2026_1401)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/13/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical