Siideynta soo socota ee curl, utility iyo maktabad loogu talagalay wareejinta xogta shabakada, ayaa dhacday. In ka badan 25 sano ee horumarinta mashruuca, curl waxay hirgelisay taageerada borotokoolka shabakado badan, sida HTTP, Gopher, FTP, SMTP, IMAP, POP3, SMB iyo MQTT. Maktabadda libcurl waxaa adeegsada mashaariicda muhiimka u ah bulshada sida Git iyo LibreOffice. Xeerka mashruuca waxa lagu qaybiyaa shati Curl (ikhtiyaarka shatiga MIT).
Siidaynta ayaa xusid mudan laba sababood awgood:
- ayaa lagu daray taageero borotokoolka IPFS;
- go'an khatar ah nuglaanta hirgelinta nidaamka SOCKS5;
Nuglaanta ayaa gaar ahaan ahayd calaamadeysan by qoraaga mashruuca Daniel Stenberg, sida "mid ka mid ah dayacanka ugu daran ee curl muddo dheer." Nuglaanta waxaa sababa qalad ku yimid caqli-galnimada sameynta xiriirinta wakiilka SOCKS5, kaas oo u ogolaanaya weeraryahan inuu buux dhaafiyo keydka oo uu fuliyo kood aan sabab lahayn dhinaca codsiga.
Khaladka waxa aqoonsaday Jay Satiro, iyada oo qayb ka ah barnaamijka Intarneedka Bug Bounty waxa la siiyay magdhow dhan $4660.
Waa in la ogaadaa in Daniel uu boos firfircoon ka qaato arrimaha amniga iyo shaqeeyaa ka shaqaynta hirgelinta borotokoolka Rust HTTP ee curlka.
Source: linux.org.ru
