Oracle alert ELSA-2023-4523 (curl)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2023-4523 Moderate: Oracle Linux 8 curl security update | |
| Date: | Thu, 10 Aug 2023 11:30:51 -0700 | |
| Message-ID: | <mailman.230.1691692264.15189.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2023-4523 http://linux.oracle.com/errata/ELSA-2023-4523.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: curl-7.61.1-30.el8_8.3.x86_64.rpm libcurl-7.61.1-30.el8_8.3.i686.rpm libcurl-7.61.1-30.el8_8.3.x86_64.rpm libcurl-devel-7.61.1-30.el8_8.3.i686.rpm libcurl-devel-7.61.1-30.el8_8.3.x86_64.rpm libcurl-minimal-7.61.1-30.el8_8.3.i686.rpm libcurl-minimal-7.61.1-30.el8_8.3.x86_64.rpm aarch64: curl-7.61.1-30.el8_8.3.aarch64.rpm libcurl-7.61.1-30.el8_8.3.aarch64.rpm libcurl-devel-7.61.1-30.el8_8.3.aarch64.rpm libcurl-minimal-7.61.1-30.el8_8.3.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//curl-7.61.1-30.e... Related CVEs: CVE-2023-27536 CVE-2023-28321 Description of changes: [7.61.1-30.el8_8.3] - GSS delegation too eager connection re-use (CVE-2023-27536) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata