Skip to content
OpenAdvisories
Low ALSA-2022:8299 1 CVE

Low: curl security update

Published Nov 15, 2022 · Updated Oct 29, 2026

Summary

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: bad local IPv6 connection reuse (CVE-2022-27775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 5

ReleasePackageFixed in
AlmaLinux · 9 curl 7.76.1-19.el9
AlmaLinux · 9 curl-minimal 7.76.1-19.el9
AlmaLinux · 9 libcurl 7.76.1-19.el9
AlmaLinux · 9 libcurl-devel 7.76.1-19.el9
AlmaLinux · 9 libcurl-minimal 7.76.1-19.el9

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-27775
  • report
    https://bugzilla.redhat.com/2078388
  • advisory
    https://errata.almalinux.org/9/ALSA-2022-8299.html