Red Hat Security Advisory: rh-dotnet31-curl security update

Fixed packages 4

Vulnerabilities 4

• High 7.5
  CVE-2021-22946

  A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or F…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Sep 29, 2021
• Medium 5.9
  CVE-2021-22947

  When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Sep 29, 2021
• Medium 5.3
  CVE-2021-22876

  curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Act…

  curl curl curl Debian Ubuntu Alpine
  Apr 1, 2021
• Low 3.7
  CVE-2021-22924 Public exploit

  libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Aug 5, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1941964
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1981460
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2003175
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2003191
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1354.json
• report
  https://access.redhat.com/security/cve/CVE-2021-22876
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22876
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22876
• report
  https://access.redhat.com/security/cve/CVE-2021-22924
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22924
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22924
• article
  https://curl.se/docs/CVE-2021-22924.html
• report
  https://access.redhat.com/security/cve/CVE-2021-22946
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22946
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22946
• article
  https://curl.se/docs/CVE-2021-22946.html
• report
  https://access.redhat.com/security/cve/CVE-2021-22947
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22947
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22947
• article
  https://curl.se/docs/CVE-2021-22947.html