Update cURL 8.0.1 Windows Server

Saeed Ramirez 150 Reputation points
2023-10-15T16:39:55.5366667+00:00

Hello, I appreciate your support with the following:

As of the day of this post, our vulnerability detection tool has detected the curl 8.0.1 version as vulnerable on the network, which appears in Windows 2016-2019-2022 server operating systems in an integrated manner.

Currently, the updated version 8.4.0 is listed on the official curl page, but you couldn't find the appropriate method to update the curl component.

I would appreciate it if you could provide me with the correct method to update the component or if you have information about the OS patch/update that will fix this vulnerability.

It is important to indicate that the vulnerability was published since 09/2023/14. requesting at that time the update for version 8.3.0 and because an update has not been published until today, a new update of the component was released which is 8.4.0.

Thank you!

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,635 questions
{count} votes

1 answer

Sort by: Most helpful
  1. abbodi86 3,866 Reputation points
    2023-10-15T17:41:59.1233333+00:00

    Only Windows updates can update inbox components, wait

    https://www.reddit.com/r/sysadmin/comments/174ncwy/comment/k4e3q7h

    p.s. cURL author take on the matter
    https://daniel.haxx.se/blog/2023/04/24/deleting-system32curl-exe/

    0 comments No comments