Lucene search
RedHatRHSA-2023:4354HistoryAug 01, 2023 - 7:58 a.m.
(RHSA-2023:4354) Moderate: curl security update
2023-08-0107:58:15
access.redhat.com
17
rhsa-2023-4354
curl packages
libcurl library
curl utility
downloading files
http
ftp
ldap
idn wildcard match
improper certificate validation
more post-after-put confusion
cve-2023-28321
cve-2023-28322
references section
unix
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
-
curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321)
-
curl: more POST-after-PUT confusion (CVE-2023-28322)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | s390x | curl-debuginfo | < 7.76.1-23.el9_2.2 | curl-debuginfo-7.76.1-23.el9_2.2.s390x.rpm |
| RedHat | 9 | ppc64le | curl-minimal-debuginfo | < 7.76.1-23.el9_2.2 | curl-minimal-debuginfo-7.76.1-23.el9_2.2.ppc64le.rpm |
| RedHat | 9 | ppc64le | libcurl-minimal-debuginfo | < 7.76.1-23.el9_2.2 | libcurl-minimal-debuginfo-7.76.1-23.el9_2.2.ppc64le.rpm |
| RedHat | 9 | i686 | curl-debugsource | < 7.76.1-23.el9_2.2 | curl-debugsource-7.76.1-23.el9_2.2.i686.rpm |
| RedHat | 9 | s390x | curl-debugsource | < 7.76.1-23.el9_2.2 | curl-debugsource-7.76.1-23.el9_2.2.s390x.rpm |
| RedHat | 9 | x86_64 | curl | < 7.76.1-23.el9_2.2 | curl-7.76.1-23.el9_2.2.x86_64.rpm |
| RedHat | 9 | s390x | curl-minimal | < 7.76.1-23.el9_2.2 | curl-minimal-7.76.1-23.el9_2.2.s390x.rpm |
| RedHat | 9 | x86_64 | curl-debuginfo | < 7.76.1-23.el9_2.2 | curl-debuginfo-7.76.1-23.el9_2.2.x86_64.rpm |
| RedHat | 9 | i686 | libcurl-minimal-debuginfo | < 7.76.1-23.el9_2.2 | libcurl-minimal-debuginfo-7.76.1-23.el9_2.2.i686.rpm |
| RedHat | 9 | aarch64 | libcurl-debuginfo | < 7.76.1-23.el9_2.2 | libcurl-debuginfo-7.76.1-23.el9_2.2.aarch64.rpm |
Related
nessus
nessus
EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2023-2556)
2023-08-02 00:00:00
RHEL 9 : curl (RHSA-2023:5598)
2023-10-10 00:00:00
EulerOS Virtualization 2.9.1 : curl (EulerOS-SA-2023-2953)
2024-01-16 00:00:00
openvas
openvas
Fedora: Security Advisory for curl (FEDORA-2023-8ed627bb04)
2023-06-09 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2953)
2023-10-13 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2578)
2023-08-08 00:00:00
redhat
redhat
(RHSA-2023:5598) Moderate: curl security update
2023-10-10 14:20:03
(RHSA-2023:4523) Moderate: curl security update
2023-08-08 07:21:00
(RHSA-2024:0585) Moderate: curl security and bug fix update
2024-01-30 12:53:25
fedora
fedora
[SECURITY] Fedora 37 Update: curl-7.85.0-9.fc37
2023-06-08 02:00:39
[SECURITY] Fedora 38 Update: curl-8.0.1-2.fc38
2023-06-07 02:15:37
osv
osv
Moderate: curl security update
2023-08-01 00:00:00
curl vulnerabilities
2023-07-19 12:11:55
curl regression
2023-07-19 17:34:44
oraclelinux
oraclelinux
curl security update
2023-08-02 00:00:00
curl security update
2023-08-10 00:00:00
curl security and bug fix update
2024-04-03 00:00:00
almalinux
almalinux
Moderate: curl security update
2023-08-01 00:00:00
Moderate: curl security update
2023-08-08 00:00:00
Moderate: curl security and bug fix update
2024-04-02 00:00:00
cloudfoundry
cloudfoundry
USN-6237-2: curl regression | Cloud Foundry
2023-08-10 00:00:00
USN-6237-1: curl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
ibm
ibm
ubuntu
ubuntu
curl vulnerabilities
2023-09-11 00:00:00
curl vulnerabilities
2023-07-19 00:00:00
curl regression
2023-07-19 00:00:00
freebsd
freebsd
curl -- multiple vulnerabilities
2023-03-21 00:00:00
slackware
slackware
[slackware-security] curl
2023-05-17 21:00:11
redos
redos
ROS-20230621-04
2023-06-21 00:00:00
amazon
amazon
Medium: curl
2023-08-31 22:29:00
redhatcve
redhatcve
CVE-2023-28322
2023-05-17 09:28:10
CVE-2023-28321
2023-05-17 09:27:51
cbl_mariner
cbl_mariner
CVE-2023-28322 affecting package curl for versions less than 8.0.1-2
2023-06-14 23:53:35
CVE-2023-28321 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
CVE-2023-28322 affecting package cmake for versions less than 3.21.4-6
2023-06-14 23:53:35
veracode
veracode
Improper Certificate Validation
2023-06-07 10:17:40
Use After Free
2023-06-04 10:55:34
Improper Certificate Validation
2023-06-06 16:56:36
cve
cve
CVE-2023-28321
2023-05-26 21:15:16
CVE-2023-28322
2023-05-26 21:15:16
prion
prion
Input validation
2023-05-26 21:15:00
Information disclosure
2023-05-26 21:15:00
cvelist
cvelist
CVE-2023-28321
2023-05-26 00:00:00
CVE-2023-28322
2023-05-26 00:00:00
hackerone
hackerone
curl: CVE-2023-28321: IDN wildcard match
2023-04-17 16:54:15
Internet Bug Bounty: CVE-2023-28322: more POST-after-PUT confusion
2023-05-18 09:15:01
Internet Bug Bounty: CVE-2023-28321: IDN wildcard match
2023-05-18 09:11:02
debiancve
debiancve
CVE-2023-28322
2023-05-26 21:15:16
CVE-2023-28321
2023-05-26 21:15:16
alpinelinux
alpinelinux
CVE-2023-28322
2023-05-26 21:15:16
CVE-2023-28321
2023-05-26 21:15:16
nvd
nvd
CVE-2023-28322
2023-05-26 21:15:16
CVE-2023-28321
2023-05-26 21:15:16
ubuntucve
ubuntucve
CVE-2023-28322
2023-05-17 00:00:00
CVE-2023-28321
2023-05-17 00:00:00
debian
debian
[SECURITY] [DLA 3613-1] curl security update
2023-10-11 11:49:02
[SECURITY] [DLA 3692-1] curl security update
2023-12-22 14:27:56
rocky
rocky
curl security update
2023-10-06 23:10:01
curl security and bug fix update
2024-04-05 14:55:53
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0589
2023-05-31 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0399
2023-05-31 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2023-09-25 01:16:18
gentoo
gentoo
curl: Multiple Vulnerabilities
2023-10-11 00:00:00