The remote host is missing an update to curl announced via advisory USN-726-1.

The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libcurl3 7.15.1-1ubuntu3.1 libcurl3-gnutls 7.15.1-1ubuntu3.1 Ubuntu 7.10: libcurl3 7.16.4-2ubuntu1.1 libcurl3-gnutls 7.16.4-2ubuntu1.1 Ubuntu 8.04 LTS: libcurl3 7.18.0-1ubuntu2.1 libcurl3-gnutls 7.18.0-1ubuntu2.1 Ubuntu 8.10: libcurl3 7.18.2-1ubuntu4.1 libcurl3-gnutls 7.18.2-1ubuntu4.1 In general, a standard system upgrade is sufficient to effect the necessary changes. https://secure1.securityspace.com/smysecure/catid.html?in=USN-726-1

It was discovered that curl did not enforce any restrictions when following URL redirects. If a user or automated system were tricked into opening a URL to an untrusted server, an attacker could use redirects to gain access to abitrary files. This update changes curl behavior to prevent following file URLs after a redirect.