Security update for curl
This update for curl fixes the following issues: - CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309).
- Обновитесь до 7.66.0-150200.4.45.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости curl
За последние 30 дней в curl опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 9
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
- Обновитесь до 7.66.0-150200.4.42.1
Опубликовано ОбновленоSecurity update for curl
This update for curl fixes the following issues: - CVE-2022-35252: Fixed a potential injection of control characters into cookies, which could be exploited by sister sites to cause a denial of service (bsc#1202593).
- Обновитесь до 7.66.0-150200.4.39.1
Опубликовано ОбновленоSecurity update for curl
This update for curl fixes the following issues: - CVE-2022-32206: HTTP compression denial of service (bsc#1200735) - CVE-2022-32208: FTP-KRB bad message verification (bsc#1200737)
- Обновитесь до 7.66.0-150200.4.36.1
Опубликовано ОбновленоSecurity update for curl
This update for curl fixes the following issues: - CVE-2022-27781: Fixed CERTINFO never-ending busy-loop (bsc#1199223) - CVE-2022-27782: Fixed TLS and SSH connection too eager reuse (bsc#1199224)
- Обновитесь до 7.66.0-150200.4.33.1
Опубликовано ОбновленоSecurity update for curl
This update for curl fixes the following issues: - CVE-2022-27776: Fixed auth/cookie leak on redirect (bsc#1198766) - CVE-2022-27775: Fixed bad local IPv6 connection reuse (bsc#1198723) - CVE-2022-22576: Fixed OAUTH2 bearer bypass in connection re-use (bsc#1198614)
- Обновитесь до 7.66.0-150200.4.30.1
Опубликовано ОбновленоSecurity update for curl
This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
- Обновитесь до 7.66.0-4.27.1
Опубликовано ОбновленоSecurity update for curl
This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credentials. (bsc#1188218) - CVE-2021-22922: Wrong content via metalink not discarded. (bsc#1188217)
- Обновитесь до 7.66.0-4.22.1
Опубликовано ОбновленоSecurity update for curl
This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA certificates are. This allows users to verify servers using the intermediate cert only, instead of needing the whole chain. * Set FLAG_TRUSTED_FIRST unconditionally. * Do not check partial chains with CRL check.
- Обновитесь до 7.66.0-4.17.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.