Medium ELSA-2023-3106 1 CVE

Moderate: curl security and bug fix update (Oracle Linux 8)

Published May 25, 2023 · Updated May 25, 2023

Ecosystem: Oracle Linux

Summary

[7.61.1-30.el8_8.2]
- sftp: do not specify O_APPEND when not in append mode (#2187717)

[7.61.1-30.el8_8.1]
- fix FTP too eager connection reuse (CVE-2023-27535)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	curl	0:7.61.1-30.el8_8.2
Oracle Linux · 8	libcurl	0:7.61.1-30.el8_8.2
Oracle Linux · 8	libcurl-devel	0:7.61.1-30.el8_8.2
Oracle Linux · 8	libcurl-minimal	0:7.61.1-30.el8_8.2

Vulnerabilities 1

Medium 5.9

CVE-2023-27535

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in …

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

Mar 30, 2023