ROS-20230621-04

A vulnerability in the curl program is related to incorrect certificate validation when matching wildcards in TLS certificates for IDNs.
wildcards in TLS certificates for IDNs. Exploitation of the vulnerability could allow an attacker acting remotely to create a specially crafted certificate that the library would consider trusted.
remotely to create a specially crafted certificate that the library would consider trusted.

A vulnerability in the curl program is related to improper synchronization when resolving hostnames using the
alarm() and siglongjmp() functions.Exploitation of the vulnerability could allow an attacker acting remotely to cause the application to crash.
An exploitation of the vulnerability could allow an attacker acting remotely to cause an application crash by affecting the contents of the global buffer.

The curl program vulnerability is related to a post-release usage error in SSH fingerprint validation
sha256. Exploitation of the vulnerability could allow an attacker acting remotely to use the
application to connect to a malicious SSH server, cause a post-release exploit error, and
gain access to potentially sensitive information.

The libcurl library vulnerability involves errors when sending POST and PUT HTTP requests using the
the same descriptor. Exploitation of the vulnerability could allow a remote attacker,
gain unauthorized access to protected information