ALT-PU-2023-2585-1
Package curl updated to version 7.88.0-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
BDU:2023-02154
Уязвимость механизма HSTS (HTTP Strict Transport Security) утилиты командной строки cURL, позволяющая нарушителю изменить функциональность HSTS при последовательном запросе нескольких URL-адресов
Modified: 2025-03-12
CVE-2023-23914
A cleartext transmission of sensitive information vulnerability exists in curl
Modified: 2024-11-21
CVE-2023-23915
A cleartext transmission of sensitive information vulnerability exists in curl
Modified: 2025-03-12
CVE-2023-23916
An allocation of resources without limits or throttling vulnerability exists in curl
- https://hackerone.com/reports/1826048
- https://hackerone.com/reports/1826048
- [debian-lts-announce] 20230224 [SECURITY] [DLA 3341-1] curl security update
- [debian-lts-announce] 20230224 [SECURITY] [DLA 3341-1] curl security update
- FEDORA-2023-94df30cbec
- FEDORA-2023-94df30cbec
- GLSA-202310-12
- GLSA-202310-12
- https://security.netapp.com/advisory/ntap-20230309-0006/
- https://security.netapp.com/advisory/ntap-20230309-0006/
- DSA-5365
- DSA-5365
Closed bugs
Просьба обновить до 7.88.0