ALT-PU-2023-2585-1
Package curl updated to version 7.88.0-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
BDU:2023-02154
Уязвимость механизма HSTS (HTTP Strict Transport Security) утилиты командной строки cURL, позволяющая нарушителю изменить функциональность HSTS при последовательном запросе нескольких URL-адресов
Modified: 2025-03-12
CVE-2023-23914
A cleartext transmission of sensitive information vulnerability exists in curl
Modified: 2024-11-21
CVE-2023-23915
A cleartext transmission of sensitive information vulnerability exists in curl
Modified: 2025-03-12
CVE-2023-23916
An allocation of resources without limits or throttling vulnerability exists in curl
- https://hackerone.com/reports/1826048
- https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
- https://security.gentoo.org/glsa/202310-12
- https://security.netapp.com/advisory/ntap-20230309-0006/
- https://www.debian.org/security/2023/dsa-5365
- https://hackerone.com/reports/1826048
- https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
- https://security.gentoo.org/glsa/202310-12
- https://security.netapp.com/advisory/ntap-20230309-0006/
- https://www.debian.org/security/2023/dsa-5365
Closed bugs
Просьба обновить до 7.88.0