Medium ELSA-2023-4354 2 CVEs

Moderate: curl security update (Oracle Linux 9)

Published Aug 2, 2023 · Updated Aug 2, 2023

Ecosystem: Oracle Linux

Summary

[7.76.1-23.el9_2.2]
- unify the upload/method handling (CVE-2023-28322)
- fix host name wildcard checking (CVE-2023-28321)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 9	curl	0:7.76.1-23.el9_2.2
Oracle Linux · 9	curl-minimal	0:7.76.1-23.el9_2.2
Oracle Linux · 9	libcurl	0:7.76.1-23.el9_2.2
Oracle Linux · 9	libcurl-devel	0:7.76.1-23.el9_2.2
Oracle Linux · 9	libcurl-minimal	0:7.76.1-23.el9_2.2

Vulnerabilities 2

Medium 5.9

CVE-2023-28321

An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard pat…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

May 26, 2023
Medium 5.3

CVE-2023-28322

An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously …

curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine

May 26, 2023