Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_enterprise_linux_6:curl curl as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: curl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_2:curl.src curl.src as a component of Red Hat Ceph Storage 2 | affected | no version stated vendor label: curl.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_5:curl.src curl.src as a component of Red Hat Enterprise Linux 5 | affected | no version stated vendor label: curl.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:curl.src curl.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: curl.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_2:libcurl libcurl as a component of Red Hat Ceph Storage 2 | affected | no version stated vendor label: libcurl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:libcurl libcurl as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: libcurl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:libcurl-devel libcurl-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: libcurl-devel | no fix planned fix in another branch | csaf_redhat | |
| .net_core_2.0_on_red_hat_enterprise_linux:rh-dotnet20-curl.src rh-dotnet20-curl.src as a component of .NET Core 2.0 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet20-curl.src | out of support fix in another branch | csaf_redhat | |
| .net_core_2.1_on_red_hat_enterprise_linux:rh-dotnet21-curl.src rh-dotnet21-curl.src as a component of .NET Core 2.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet21-curl.src | no fix planned fix in another branch | csaf_redhat | |
| .net_core_2.1_on_red_hat_enterprise_linux:rh-dotnet21-libcurl rh-dotnet21-libcurl as a component of .NET Core 2.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet21-libcurl | no fix planned fix in another branch | csaf_redhat | |
| .net_core_2.1_on_red_hat_enterprise_linux:rh-dotnet21-libcurl-devel rh-dotnet21-libcurl-devel as a component of .NET Core 2.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet21-libcurl-devel | no fix planned fix in another branch | csaf_redhat | |
| .net_core_1.0_on_red_hat_enterprise_linux:rh-dotnetcore10-curl.src rh-dotnetcore10-curl.src as a component of .NET Core 1.0 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnetcore10-curl.src | out of support fix in another branch | csaf_redhat | |
| .net_core_1.1_on_red_hat_enterprise_linux:rh-dotnetcore11-curl.src rh-dotnetcore11-curl.src as a component of .NET Core 1.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnetcore11-curl.src | out of support fix in another branch | csaf_redhat | |
| 7Server-7.4.E4S:curl-0:7.29.0-42.el7_4.2.ppc64le curl-0:7.29.0-42.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4) | fixed | curl-0:7.29.0-42.el7_4.2.ppc64le | vendor fix → curl-0:7.29.0-42.el7_4.2.ppc64le (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.AUS:curl-0:7.29.0-42.el7_4.2.src curl-0:7.29.0-42.el7_4.2.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.4) | fixed | curl-0:7.29.0-42.el7_4.2.src | vendor fix → curl-0:7.29.0-42.el7_4.2.src (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.E4S:curl-0:7.29.0-42.el7_4.2.src curl-0:7.29.0-42.el7_4.2.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.4) | fixed | curl-0:7.29.0-42.el7_4.2.src | vendor fix → curl-0:7.29.0-42.el7_4.2.src (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.TUS:curl-0:7.29.0-42.el7_4.2.src curl-0:7.29.0-42.el7_4.2.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.4) | fixed | curl-0:7.29.0-42.el7_4.2.src | vendor fix → curl-0:7.29.0-42.el7_4.2.src (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.AUS:curl-0:7.29.0-42.el7_4.2.x86_64 curl-0:7.29.0-42.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4) | fixed | curl-0:7.29.0-42.el7_4.2.x86_64 | vendor fix → curl-0:7.29.0-42.el7_4.2.x86_64 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.E4S:curl-0:7.29.0-42.el7_4.2.x86_64 curl-0:7.29.0-42.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4) | fixed | curl-0:7.29.0-42.el7_4.2.x86_64 | vendor fix → curl-0:7.29.0-42.el7_4.2.x86_64 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.TUS:curl-0:7.29.0-42.el7_4.2.x86_64 curl-0:7.29.0-42.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4) | fixed | curl-0:7.29.0-42.el7_4.2.x86_64 | vendor fix → curl-0:7.29.0-42.el7_4.2.x86_64 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.5.EUS:curl-0:7.29.0-46.el7_5.1.ppc64 curl-0:7.29.0-46.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-0:7.29.0-46.el7_5.1.ppc64 | vendor fix → curl-0:7.29.0-46.el7_5.1.ppc64 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-0:7.29.0-46.el7_5.1.ppc64le curl-0:7.29.0-46.el7_5.1.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-0:7.29.0-46.el7_5.1.ppc64le | vendor fix → curl-0:7.29.0-46.el7_5.1.ppc64le (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-0:7.29.0-46.el7_5.1.s390x curl-0:7.29.0-46.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-0:7.29.0-46.el7_5.1.s390x | vendor fix → curl-0:7.29.0-46.el7_5.1.s390x (RHSA-2020:0544) | csaf_redhat | |
| 7ComputeNode-7.5.EUS:curl-0:7.29.0-46.el7_5.1.src curl-0:7.29.0-46.el7_5.1.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) | fixed | curl-0:7.29.0-46.el7_5.1.src | vendor fix → curl-0:7.29.0-46.el7_5.1.src (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-0:7.29.0-46.el7_5.1.src curl-0:7.29.0-46.el7_5.1.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-0:7.29.0-46.el7_5.1.src | vendor fix → curl-0:7.29.0-46.el7_5.1.src (RHSA-2020:0544) | csaf_redhat | |
| 7ComputeNode-7.5.EUS:curl-0:7.29.0-46.el7_5.1.x86_64 curl-0:7.29.0-46.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) | fixed | curl-0:7.29.0-46.el7_5.1.x86_64 | vendor fix → curl-0:7.29.0-46.el7_5.1.x86_64 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-0:7.29.0-46.el7_5.1.x86_64 curl-0:7.29.0-46.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-0:7.29.0-46.el7_5.1.x86_64 | vendor fix → curl-0:7.29.0-46.el7_5.1.x86_64 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-Alt-7.6:curl-0:7.29.0-51.el7.aarch64 curl-0:7.29.0-51.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) | fixed | curl-0:7.29.0-51.el7.aarch64 | vendor fix → curl-0:7.29.0-51.el7.aarch64 (RHSA-2018:3157) | csaf_redhat | |
| 7Server-7.6:curl-0:7.29.0-51.el7.ppc64 curl-0:7.29.0-51.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7) | fixed | curl-0:7.29.0-51.el7.ppc64 | vendor fix → curl-0:7.29.0-51.el7.ppc64 (RHSA-2018:3157) | csaf_redhat | |
| 7Server-Alt-7.6:curl-0:7.29.0-51.el7.ppc64le curl-0:7.29.0-51.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) | fixed | curl-0:7.29.0-51.el7.ppc64le | vendor fix → curl-0:7.29.0-51.el7.ppc64le (RHSA-2018:3157) | csaf_redhat | |
| 7Server-7.6:curl-0:7.29.0-51.el7.ppc64le curl-0:7.29.0-51.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7) | fixed | curl-0:7.29.0-51.el7.ppc64le | vendor fix → curl-0:7.29.0-51.el7.ppc64le (RHSA-2018:3157) | csaf_redhat | |
| 7Server-Alt-7.6:curl-0:7.29.0-51.el7.s390x curl-0:7.29.0-51.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) | fixed | curl-0:7.29.0-51.el7.s390x | vendor fix → curl-0:7.29.0-51.el7.s390x (RHSA-2018:3157) | csaf_redhat | |
| 7Server-7.6:curl-0:7.29.0-51.el7.s390x curl-0:7.29.0-51.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7) | fixed | curl-0:7.29.0-51.el7.s390x | vendor fix → curl-0:7.29.0-51.el7.s390x (RHSA-2018:3157) | csaf_redhat | |
| 7Client-7.6:curl-0:7.29.0-51.el7.src curl-0:7.29.0-51.el7.src as a component of Red Hat Enterprise Linux Client (v. 7) | fixed | curl-0:7.29.0-51.el7.src | vendor fix → curl-0:7.29.0-51.el7.src (RHSA-2018:3157) | csaf_redhat | |
| 7ComputeNode-7.6:curl-0:7.29.0-51.el7.src curl-0:7.29.0-51.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7) | fixed | curl-0:7.29.0-51.el7.src | vendor fix → curl-0:7.29.0-51.el7.src (RHSA-2018:3157) | csaf_redhat | |
| 7Server-Alt-7.6:curl-0:7.29.0-51.el7.src curl-0:7.29.0-51.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) | fixed | curl-0:7.29.0-51.el7.src | vendor fix → curl-0:7.29.0-51.el7.src (RHSA-2018:3157) | csaf_redhat | |
| 7Server-7.6:curl-0:7.29.0-51.el7.src curl-0:7.29.0-51.el7.src as a component of Red Hat Enterprise Linux Server (v. 7) | fixed | curl-0:7.29.0-51.el7.src | vendor fix → curl-0:7.29.0-51.el7.src (RHSA-2018:3157) | csaf_redhat | |
| 7Workstation-7.6:curl-0:7.29.0-51.el7.src curl-0:7.29.0-51.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7) | fixed | curl-0:7.29.0-51.el7.src | vendor fix → curl-0:7.29.0-51.el7.src (RHSA-2018:3157) | csaf_redhat | |
| 7Client-7.6:curl-0:7.29.0-51.el7.x86_64 curl-0:7.29.0-51.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7) | fixed | curl-0:7.29.0-51.el7.x86_64 | vendor fix → curl-0:7.29.0-51.el7.x86_64 (RHSA-2018:3157) | csaf_redhat | |
| 7ComputeNode-7.6:curl-0:7.29.0-51.el7.x86_64 curl-0:7.29.0-51.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7) | fixed | curl-0:7.29.0-51.el7.x86_64 | vendor fix → curl-0:7.29.0-51.el7.x86_64 (RHSA-2018:3157) | csaf_redhat | |
| 7Server-7.6:curl-0:7.29.0-51.el7.x86_64 curl-0:7.29.0-51.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7) | fixed | curl-0:7.29.0-51.el7.x86_64 | vendor fix → curl-0:7.29.0-51.el7.x86_64 (RHSA-2018:3157) | csaf_redhat | |
| 7Workstation-7.6:curl-0:7.29.0-51.el7.x86_64 curl-0:7.29.0-51.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7) | fixed | curl-0:7.29.0-51.el7.x86_64 | vendor fix → curl-0:7.29.0-51.el7.x86_64 (RHSA-2018:3157) | csaf_redhat | |
| 7Server-7.4.AUS:curl-debuginfo-0:7.29.0-42.el7_4.2.i686 curl-debuginfo-0:7.29.0-42.el7_4.2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4) | fixed | curl-debuginfo-0:7.29.0-42.el7_4.2.i686 | vendor fix → curl-debuginfo-0:7.29.0-42.el7_4.2.i686 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.E4S:curl-debuginfo-0:7.29.0-42.el7_4.2.i686 curl-debuginfo-0:7.29.0-42.el7_4.2.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4) | fixed | curl-debuginfo-0:7.29.0-42.el7_4.2.i686 | vendor fix → curl-debuginfo-0:7.29.0-42.el7_4.2.i686 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.TUS:curl-debuginfo-0:7.29.0-42.el7_4.2.i686 curl-debuginfo-0:7.29.0-42.el7_4.2.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4) | fixed | curl-debuginfo-0:7.29.0-42.el7_4.2.i686 | vendor fix → curl-debuginfo-0:7.29.0-42.el7_4.2.i686 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.E4S:curl-debuginfo-0:7.29.0-42.el7_4.2.ppc64le curl-debuginfo-0:7.29.0-42.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4) | fixed | curl-debuginfo-0:7.29.0-42.el7_4.2.ppc64le | vendor fix → curl-debuginfo-0:7.29.0-42.el7_4.2.ppc64le (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.AUS:curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4) | fixed | curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 | vendor fix → curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.E4S:curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4) | fixed | curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 | vendor fix → curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 (RHSA-2020:0594) | csaf_redhat | |
| 7Server-7.4.TUS:curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4) | fixed | curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 | vendor fix → curl-debuginfo-0:7.29.0-42.el7_4.2.x86_64 (RHSA-2020:0594) | csaf_redhat | |
| 7ComputeNode-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.i686 curl-debuginfo-0:7.29.0-46.el7_5.1.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.i686 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.i686 (RHSA-2020:0544) | csaf_redhat | |
| 7ComputeNode-optional-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.i686 curl-debuginfo-0:7.29.0-46.el7_5.1.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.i686 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.i686 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.i686 curl-debuginfo-0:7.29.0-46.el7_5.1.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.i686 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.i686 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.ppc curl-debuginfo-0:7.29.0-46.el7_5.1.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.ppc | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.ppc (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64 curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64le curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64le | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.ppc64le (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.s390 curl-debuginfo-0:7.29.0-46.el7_5.1.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.s390 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.s390 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.s390x curl-debuginfo-0:7.29.0-46.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.s390x | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.s390x (RHSA-2020:0544) | csaf_redhat | |
| 7ComputeNode-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 (RHSA-2020:0544) | csaf_redhat | |
| 7ComputeNode-optional-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 (RHSA-2020:0544) | csaf_redhat | |
| 7Server-7.5.EUS:curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5) | fixed | curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 | vendor fix → curl-debuginfo-0:7.29.0-46.el7_5.1.x86_64 (RHSA-2020:0544) | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.