Summary
[7.61.1-30.el8_8.3]
- GSS delegation too eager connection re-use (CVE-2023-27536)
- fix host name wildcard checking (CVE-2023-28321)
- rebuild certs with 2048-bit RSA keys
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | curl | 0:7.61.1-30.el8_8.3 |
| Oracle Linux · 8 | libcurl | 0:7.61.1-30.el8_8.3 |
| Oracle Linux · 8 | libcurl-devel | 0:7.61.1-30.el8_8.3 |
| Oracle Linux · 8 | libcurl-minimal | 0:7.61.1-30.el8_8.3 |
Vulnerabilities 2
-
Medium 5.9
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously…
-
Medium 5.9
An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard pat…