curl - security update

Fixed packages 1

Vulnerabilities 15

• Critical 9.8
  CVE-2022-32207 EPSS 12%

  When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jul 7, 2022
• Critical 9.1
  CVE-2021-22945

  When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointe…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Sep 23, 2021
• High 8.1
  CVE-2022-22576

  An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-a…

  curl curl curl Debian Ubuntu Alpine
  May 26, 2022
• High 7.5
  CVE-2021-22946

  A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or F…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Sep 29, 2021
• High 7.5
  CVE-2022-27775

  An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address th…

  curl curl curl Debian Ubuntu Alpine
  Jun 1, 2022
• High 7.5
  CVE-2022-27781

  libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jun 1, 2022
• High 7.5
  CVE-2022-27782

  libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should h…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jun 1, 2022
• Medium 6.5
  CVE-2022-32206 EPSS 36%

  curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jul 7, 2022
• Medium 5.9
  CVE-2021-22947

  When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Sep 29, 2021
• Medium 5.9
  CVE-2022-32208

  When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw make…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jul 7, 2022
• Medium 5.7
  CVE-2022-27774

  An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that c…

  curl curl curl Debian Ubuntu Alpine
  Jun 1, 2022
• Medium 4.3
  CVE-2022-32205 EPSS 31%

  A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 st…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jul 7, 2022
• Low 3.7
  CVE-2021-22924 Public exploit

  libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Aug 5, 2021
• Low 3.1
  CVE-2021-22898

  curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TEL…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jun 11, 2021
• Unscored —
  CVE-2022-27776

  A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header…

  curl curl curl Debian Ubuntu Alpine
  Jun 1, 2022