Summary
[7.61.1-30]
- fix HTTP multi-header compression denial of service (CVE-2023-23916)
[7.61.1-29]
- h2: lower initial window size to 32 MiB (#2166254)
[7.61.1-28]
- smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)
[7.61.1-27]
- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)
[7.61.1-26]
- control code in cookie denial of service (CVE-2022-35252)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | curl | 0:7.61.1-30.el8 |
| Oracle Linux · 8 | libcurl | 0:7.61.1-30.el8 |
| Oracle Linux · 8 | libcurl-devel | 0:7.61.1-30.el8 |
| Oracle Linux · 8 | libcurl-minimal | 0:7.61.1-30.el8 |
Vulnerabilities 2
-
Medium 5.9
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it support…
-
Low 3.7
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when …