Medium ELSA-2023-1701 1 CVE

Moderate: curl security update (Oracle Linux 9)

Published Apr 11, 2023 · Updated Apr 11, 2023

Ecosystem: Oracle Linux

Summary

[7.76.1-19.el9_1.2]
- fix HTTP multi-header compression denial of service (CVE-2023-23916)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 9	curl	0:7.76.1-19.el9_1.2
Oracle Linux · 9	curl-minimal	0:7.76.1-19.el9_1.2
Oracle Linux · 9	libcurl	0:7.76.1-19.el9_1.2
Oracle Linux · 9	libcurl-devel	0:7.76.1-19.el9_1.2
Oracle Linux · 9	libcurl-minimal	0:7.76.1-19.el9_1.2

Vulnerabilities 1

Medium 6.5

CVE-2023-23916

An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HT…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

Feb 23, 2023