Medium ELSA-2023-1140 1 CVE

Moderate: curl security update (Oracle Linux 8)

Published Mar 7, 2023 · Updated Mar 7, 2023

Ecosystem: Oracle Linux

Summary

[7.61.1-25.el8_7.3]
- fix HTTP multi-header compression denial of service (CVE-2023-23916)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	curl	0:7.61.1-25.el8_7.3
Oracle Linux · 8	libcurl	0:7.61.1-25.el8_7.3
Oracle Linux · 8	libcurl-devel	0:7.61.1-25.el8_7.3
Oracle Linux · 8	libcurl-minimal	0:7.61.1-25.el8_7.3

Vulnerabilities 1

Medium 6.5

CVE-2023-23916

An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HT…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

Feb 23, 2023