GCVE-110-MAGEIA-2025-123

Advisory Published

Vulnetix · Advisory published April 3, 2025

When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. The fix was included previously as part of MGAA-2025-0004.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	curl	0 (affected), 7.88.1-4.6.mga9 (unaffected)	—

Aliases

CVE-2025-0665

References

Updated curl packages fix security vulnerabilities

advisory

Updated curl packages fix security vulnerabilities

issue

Updated curl packages fix security vulnerabilities

issue

Updated curl packages fix security vulnerabilities

issue

Updated curl packages fix security vulnerabilities

issue

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON