Oracle alert ELSA-2023-2650 (curl)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2023-2650 Moderate: Oracle Linux 9 curl security update | |
| Date: | Thu, 18 May 2023 02:05:44 -0700 | |
| Message-ID: | <mailman.11.1684400755.7405.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2023-2650 http://linux.oracle.com/errata/ELSA-2023-2650.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: curl-7.76.1-23.el9_2.1.x86_64.rpm curl-minimal-7.76.1-23.el9_2.1.x86_64.rpm libcurl-7.76.1-23.el9_2.1.i686.rpm libcurl-7.76.1-23.el9_2.1.x86_64.rpm libcurl-devel-7.76.1-23.el9_2.1.i686.rpm libcurl-devel-7.76.1-23.el9_2.1.x86_64.rpm libcurl-minimal-7.76.1-23.el9_2.1.i686.rpm libcurl-minimal-7.76.1-23.el9_2.1.x86_64.rpm aarch64: curl-7.76.1-23.el9_2.1.aarch64.rpm curl-minimal-7.76.1-23.el9_2.1.aarch64.rpm libcurl-7.76.1-23.el9_2.1.aarch64.rpm libcurl-devel-7.76.1-23.el9_2.1.aarch64.rpm libcurl-minimal-7.76.1-23.el9_2.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//curl-7.76.1-23.e... Related CVEs: CVE-2023-27535 Description of changes: [7.76.1-23.el9_2.1] - fix FTP too eager connection reuse (CVE-2023-27535) [7.76.1-23] - fix HTTP multi-header compression denial of service (CVE-2023-23916) [7.76.1-22] - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) [7.76.1-21] - fix POST following PUT confusion (CVE-2022-32221) [7.76.1-20] - control code in cookie denial of service (CVE-2022-35252) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata