MGASA-2015-0440
Updated python-curl packages fix security vulnerability
A use-after-free vulnerability was found in Curl object's HTTPPOST setopt when a Unicode value is passed as a value with a FORM_BUFFERPTR. The str object created from the passed in unicode object would have its buffer used but the unicode object would be stored instead of the str object (rhbz#1277488).
What each source reports
OSV No score
Updated python-curl packages fix security vulnerability
A use-after-free vulnerability was found in Curl object's HTTPPOST setopt when a Unicode value is passed as a value with a FORM_BUFFERPTR. The str object created from the passed in unicode object would have its buffer used but the unicode object would be stored instead of the str object (rhbz#1277488).
- Record
MGASA-2015-0440- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-curlMageia:5 |
before 7.19.5-4.1.mga5 | 7.19.5-4.1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0440 is a vulnerability with no CVSS score yet in python-curl, published November 10, 2015. No source lists public exploit code. Fixed in python-curl 7.19.5-4.1.mga5.