Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::baseos | curl | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | curl-debuginfo | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | curl-debugsource | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | curl-minimal-debuginfo | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libcurl | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libcurl-debuginfo | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libcurl-devel | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libcurl-minimal | 0:7.61.1-18.el8_4.1 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | libcurl-minimal-debuginfo | 0:7.61.1-18.el8_4.1 |
Vulnerabilities 3
-
Medium 6.5
When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided…
-
Low 3.7CVE-2021-22924 Public exploit
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches…
-
Unscored —
When curl is instructed to get content using the metalink feature, and a user name and password are used to download th…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1981435
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1981438
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1981460
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3582.json
-
report
https://access.redhat.com/security/cve/CVE-2021-22922
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-22922
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-22922
-
article
https://curl.se/docs/CVE-2021-22922.html
-
report
https://access.redhat.com/security/cve/CVE-2021-22923
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-22923
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-22923
-
article
https://curl.se/docs/CVE-2021-22923.html
-
report
https://access.redhat.com/security/cve/CVE-2021-22924
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-22924
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-22924
-
article
https://curl.se/docs/CVE-2021-22924.html