Medium ELSA-2023-0333 1 CVE

Moderate: curl security update (Oracle Linux 9)

Published Jan 24, 2023 · Updated Jan 24, 2023

Ecosystem: Oracle Linux

Summary

[7.76.1-19.el9_1.1]
- fix POST following PUT confusion (CVE-2022-32221)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 9	curl	0:7.76.1-19.el9_1.1
Oracle Linux · 9	curl-minimal	0:7.76.1-19.el9_1.1
Oracle Linux · 9	libcurl	0:7.76.1-19.el9_1.1
Oracle Linux · 9	libcurl-devel	0:7.76.1-19.el9_1.1
Oracle Linux · 9	libcurl-minimal	0:7.76.1-19.el9_1.1

Vulnerabilities 1

Critical 9.8

CVE-2022-32221

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data …

curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine Wolfi

Dec 5, 2022