#509 Insecure version of CURL bundled

open
nobody
Sonstiges (40)
5
2012-01-31
2012-01-31
No

Secunia PSI, a well recognized program that identifies insecure programs, lists the copy of curl.exe you're bundling as insecure. You're shipping 7.21.7.0 and the current/secure version is 7.24 patching one or more vulnerabilities.

Description of vulnerability:
http://secunia.com/advisories/47690/

Discussion