StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · curl

`curl` CVE matrix across Linux distros

1031 CVEs tracked across 8 distro releases. Showing the 200 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2003-1605→ fixed in7.10.7-1
CVE-2005-0490→ fixed in7.13.0-2
CVE-2005-3185→ fixed in7.15.0-1
CVE-2005-4077→ fixed in7.15.1-1
CVE-2006-1061→ fixed in7.15.3-1
CVE-2007-3564→ fixed in7.16.4-1
CVE-2009-0037→ fixed in7.18.2-8.1
CVE-2009-2417→ fixed in7.19.5-1.1
+37 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y curl

Debian bookworm

Source: Debian

CVE-2003-1605→ fixed in7.10.7-1
CVE-2005-0490→ fixed in7.13.0-2
CVE-2005-3185→ fixed in7.15.0-1
CVE-2005-4077→ fixed in7.15.1-1
CVE-2006-1061→ fixed in7.15.3-1
CVE-2007-3564→ fixed in7.16.4-1
CVE-2009-0037→ fixed in7.18.2-8.1
CVE-2009-2417→ fixed in7.19.5-1.1
+37 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y curl

Debian trixie

Source: Debian

CVE-2003-1605→ fixed in7.10.7-1
CVE-2005-0490→ fixed in7.13.0-2
CVE-2005-3185→ fixed in7.15.0-1
CVE-2005-4077→ fixed in7.15.1-1
CVE-2006-1061→ fixed in7.15.3-1
CVE-2007-3564→ fixed in7.16.4-1
CVE-2009-0037→ fixed in7.18.2-8.1
CVE-2009-2417→ fixed in7.19.5-1.1
+37 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y curl

Alpine v3.20

Source: Alpine secdb

CVE-2014-0138→ fixed in7.36.0-r0
CVE-2014-0139→ fixed in7.36.0-r0
CVE-2016-5419→ fixed in7.50.1-r0
CVE-2016-5420→ fixed in7.50.1-r0
CVE-2016-5421→ fixed in7.50.1-r0
CVE-2016-7141→ fixed in7.50.2-r0
CVE-2016-7167→ fixed in7.50.3-r0
CVE-2016-8615→ fixed in7.51.0-r0
+5 more in Alpine v3.20

Single command to patch all of these:

apk add --upgrade curl

Alpine v3.21

Source: Alpine secdb

CVE-2014-0138→ fixed in7.36.0-r0
CVE-2014-0139→ fixed in7.36.0-r0
CVE-2016-5419→ fixed in7.50.1-r0
CVE-2016-5420→ fixed in7.50.1-r0
CVE-2016-5421→ fixed in7.50.1-r0
CVE-2016-7141→ fixed in7.50.2-r0
CVE-2016-7167→ fixed in7.50.3-r0
CVE-2016-8615→ fixed in7.51.0-r0
+5 more in Alpine v3.21

Single command to patch all of these:

apk add --upgrade curl

Alpine edge

Source: Alpine secdb

CVE-2014-0138→ fixed in7.36.0-r0
CVE-2014-0139→ fixed in7.36.0-r0
CVE-2016-5419→ fixed in7.50.1-r0
CVE-2016-5420→ fixed in7.50.1-r0
CVE-2016-5421→ fixed in7.50.1-r0
CVE-2016-7141→ fixed in7.50.2-r0
CVE-2016-7167→ fixed in7.50.3-r0
CVE-2016-8615→ fixed in7.51.0-r0
+5 more in Alpine edge

Single command to patch all of these:

apk add --upgrade curl

Alpine v3.18

Source: Alpine secdb

CVE-2014-0138→ fixed in7.36.0-r0
CVE-2014-0139→ fixed in7.36.0-r0
CVE-2016-5419→ fixed in7.50.1-r0
CVE-2016-5420→ fixed in7.50.1-r0
CVE-2016-5421→ fixed in7.50.1-r0
CVE-2016-7141→ fixed in7.50.2-r0
CVE-2016-7167→ fixed in7.50.3-r0
CVE-2016-8615→ fixed in7.51.0-r0
+5 more in Alpine v3.18

Single command to patch all of these:

apk add --upgrade curl

Alpine v3.19

Source: Alpine secdb

CVE-2014-0138→ fixed in7.36.0-r0
CVE-2014-0139→ fixed in7.36.0-r0
CVE-2016-5419→ fixed in7.50.1-r0
CVE-2016-5420→ fixed in7.50.1-r0
CVE-2016-5421→ fixed in7.50.1-r0
CVE-2016-7141→ fixed in7.50.2-r0
CVE-2016-7167→ fixed in7.50.3-r0
CVE-2016-8615→ fixed in7.51.0-r0
+5 more in Alpine v3.19

Single command to patch all of these:

apk add --upgrade curl

Is YOUR curl patched?

5-second check on your actual server. The quickscan reads your installed curl version and matches against the same 1031-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)