Kuburitswa kunotevera kwe curl, chishandiso uye raibhurari yekufambisa data pamusoro petiweki, zvaitika. Kwemakore makumi maviri neshanu ekuvandudzwa kweprojekiti, curl yakaisa rutsigiro kune akawanda network protocol, seHTTP, Gopher, FTP, SMTP, IMAP, POP25, SMB uye MQTT. Libcurl raibhurari inoshandiswa neakakosha mapurojekiti enharaunda seGit uye LibreOffice. Iyo kodhi yeprojekiti inogoverwa pasi perezinesi Curl (MIT rezinesi sarudzo).
Kuburitswa kunoonekwa nekuda kwezvikonzero zviviri:
- akawedzera protocol rutsigiro IPFS;
- fixed ngozi vulnerability mukushandiswa kweSOCKS5 protocol;
Kusagadzikana kwakanyanya marked nemunyori wepurojekiti, Daniel Stenberg, se "imwe yezvakanyanya kusasimba mu curl munguva refu." Kusagadzikana uku kunokonzerwa nekukanganisa mukufunga kwekutanga chinongedzo neSOCKS5 proxy, iyo inobvumira munhu anorwisa kuti afashukire buffer uye kuita zvekupokana kodhi padivi rekushandisa.
Iko kukanganisa kwakaonekwa naJay Satiro, sechikamu chechirongwa Iyo Internet Bug Bounty akabhadharwa muripo we$4660.
Zvinofanira kucherechedzwa kuti Danieri anotora chinzvimbo chekushanda mune zvekuchengetedza nyaya uye iri kushanda kushanda pakushandisa iyo Rust HTTP protocol mu curl.
Source: linux.org.ru
