ALT Linux Team

Package curl update in sisyphus_riscv64 on 2023-02-16

ALT-PU-2023-2570-1

Package curl updated to version 7.88.0-alt1 for branch sisyphus_riscv64.

Closed vulnerabilities

Published: 2022-12-21

BDU:2023-02154

Уязвимость механизма HSTS (HTTP Strict Transport Security) утилиты командной строки cURL, позволяющая нарушителю изменить функциональность HSTS при последовательном запросе нескольких URL-адресов

Severity: CRITICAL (9.1) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
References:
Published: 2023-02-23
Modified: 2024-11-21

CVE-2023-23914

A cleartext transmission of sensitive information vulnerability exists in curl

Severity: CRITICAL (9.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
References:
Published: 2023-02-23
Modified: 2024-11-21

CVE-2023-23915

A cleartext transmission of sensitive information vulnerability exists in curl

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
References:
Published: 2023-02-23
Modified: 2024-11-21

CVE-2023-23916

An allocation of resources without limits or throttling vulnerability exists in curl

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:

Closed bugs

Bug #45281

Просьба обновить до 7.88.0

VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top