Lucene search

K
oraclelinuxOracleLinuxELSA-2023-2650
HistoryMay 17, 2023 - 12:00 a.m.

curl security update

2023-05-1700:00:00
linux.oracle.com
9
curl
security
update
ftp
connection
reuse
http
multi-header
compression
denial of service
smb
telnet
use-after-free
post
put confusion
control code
cookie
unix

0.002 Low

EPSS

Percentile

51.9%

[7.76.1-23.el9_2.1]

  • fix FTP too eager connection reuse (CVE-2023-27535)
    [7.76.1-23]
  • fix HTTP multi-header compression denial of service (CVE-2023-23916)
    [7.76.1-22]
  • smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)
    [7.76.1-21]
  • fix POST following PUT confusion (CVE-2022-32221)
    [7.76.1-20]
  • control code in cookie denial of service (CVE-2022-35252)