Medium ELSA-2024-1129 1 CVE

Moderate: curl security update (Oracle Linux 9)

Published Mar 6, 2024 · Updated Mar 6, 2024

Ecosystem: Oracle Linux

Summary

[7.76.1-26.el9_3.3]
- cap SFTP packet size sent (RHEL-14697)
- lowercase the domain names before PSL checks (CVE-2023-46218)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 9	curl	0:7.76.1-26.el9_3.3
Oracle Linux · 9	curl-minimal	0:7.76.1-26.el9_3.3
Oracle Linux · 9	libcurl	0:7.76.1-26.el9_3.3
Oracle Linux · 9	libcurl-devel	0:7.76.1-26.el9_3.3
Oracle Linux · 9	libcurl-minimal	0:7.76.1-26.el9_3.3

Vulnerabilities 1

Medium 6.5

CVE-2023-46218

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than …

curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi

Dec 7, 2023