Lucene search
RedHatRHSA-2023:4139HistoryJul 18, 2023 - 7:24 a.m.
(RHSA-2023:4139) Moderate: curl security update
2023-07-1807:24:38
access.redhat.com
23
curl
security
update
cve-2022-32221
cve-2023-23916
http
ftp
ldap
0.007 Low
EPSS
Percentile
79.8%
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
-
curl: POST following PUT confusion (CVE-2022-32221)
-
curl: HTTP multi-header compression denial of service (CVE-2023-23916)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | s390x | libcurl-devel | < 7.76.1-14.el9_0.6 | libcurl-devel-7.76.1-14.el9_0.6.s390x.rpm |
| RedHat | 9 | i686 | curl-minimal-debuginfo | < 7.76.1-14.el9_0.6 | curl-minimal-debuginfo-7.76.1-14.el9_0.6.i686.rpm |
| RedHat | 9 | aarch64 | libcurl-debuginfo | < 7.76.1-14.el9_0.6 | libcurl-debuginfo-7.76.1-14.el9_0.6.aarch64.rpm |
| RedHat | 9 | i686 | curl-debugsource | < 7.76.1-14.el9_0.6 | curl-debugsource-7.76.1-14.el9_0.6.i686.rpm |
| RedHat | 9 | ppc64le | libcurl-devel | < 7.76.1-14.el9_0.6 | libcurl-devel-7.76.1-14.el9_0.6.ppc64le.rpm |
| RedHat | 9 | ppc64le | libcurl-debuginfo | < 7.76.1-14.el9_0.6 | libcurl-debuginfo-7.76.1-14.el9_0.6.ppc64le.rpm |
| RedHat | 9 | x86_64 | libcurl | < 7.76.1-14.el9_0.6 | libcurl-7.76.1-14.el9_0.6.x86_64.rpm |
| RedHat | 9 | ppc64le | curl-debugsource | < 7.76.1-14.el9_0.6 | curl-debugsource-7.76.1-14.el9_0.6.ppc64le.rpm |
| RedHat | 9 | ppc64le | libcurl | < 7.76.1-14.el9_0.6 | libcurl-7.76.1-14.el9_0.6.ppc64le.rpm |
| RedHat | 9 | s390x | curl-debuginfo | < 7.76.1-14.el9_0.6 | curl-debuginfo-7.76.1-14.el9_0.6.s390x.rpm |
Related
nessus
nessus
RHEL 9 : curl (RHSA-2023:4139)
2023-07-18 00:00:00
EulerOS Virtualization 3.0.2.0 : curl (EulerOS-SA-2023-1715)
2023-05-07 00:00:00
EulerOS 2.0 SP9 : curl (EulerOS-SA-2023-1119)
2023-01-06 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1496)
2023-03-09 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1715)
2023-05-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3769-1)
2022-10-27 00:00:00
rocky
rocky
curl security update
2023-01-23 14:30:22
curl security update
2023-03-08 16:37:30
prion
prion
Design/Logic Flaw
2022-12-05 22:15:00
Design/Logic Flaw
2023-02-23 20:15:00
nvd
nvd
CVE-2022-32221
2022-12-05 22:15:10
CVE-2023-23916
2023-02-23 20:15:13
osv
osv
POST following PUT confusion
2022-10-26 08:00:00
Moderate: curl security update
2023-01-23 00:00:00
Moderate: curl security update
2023-03-07 00:00:00
ibm
ibm
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in libcurl (CVE-2022-32221)
2023-05-17 22:25:05
Security Bulletin: AIX is vulnerable to security restrictions bypass due to curl (CVE-2022-32221)
2023-05-26 16:05:20
Security Bulletin: A vulnerability in libcURL affect IBM Rational ClearCase.
2023-10-03 14:06:51
cvelist
cvelist
CVE-2022-32221
2022-12-05 00:00:00
CVE-2023-23916
2023-02-23 00:00:00
redhat
redhat
(RHSA-2023:0333) Moderate: curl security update
2023-01-23 14:30:22
(RHSA-2023:1842) Moderate: curl security update
2023-04-18 16:09:24
(RHSA-2023:1140) Moderate: curl security update
2023-03-07 13:28:28
cgr
cgr
CVE-2022-32221 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2023-23916
2023-02-15 00:00:00
CVE-2022-32221
2022-10-26 00:00:00
redhatcve
redhatcve
CVE-2023-23916
2023-02-17 11:57:23
CVE-2022-32221
2022-10-26 14:23:07
almalinux
almalinux
Moderate: curl security update
2023-03-07 00:00:00
Moderate: curl security update
2023-04-11 00:00:00
Moderate: curl security update
2023-01-23 00:00:00
oraclelinux
oraclelinux
curl security update
2023-04-11 00:00:00
curl security update
2023-03-07 00:00:00
curl security update
2023-01-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-23916 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
CVE-2023-23916 affecting package cmake 3.21.4-10
2024-06-26 15:36:28
CVE-2023-23916 affecting package cmake 3.21.4-3
2024-06-26 15:36:24
mageia
mageia
Updated curl packages fix security vulnerability
2023-02-21 00:25:36
Updated curl packages fix security vulnerability
2022-11-02 01:58:59
veracode
veracode
Denial Of Service (DoS)
2023-02-18 05:23:01
Denial Of Service (DoS)
2022-10-30 13:32:34
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-13.fc36
2023-02-28 02:02:43
[SECURITY] Fedora 37 Update: curl-7.85.0-6.fc37
2023-02-19 01:39:34
alpinelinux
alpinelinux
CVE-2023-23916
2023-02-23 20:15:13
CVE-2022-32221
2022-12-05 22:15:10
debiancve
debiancve
CVE-2023-23916
2023-02-23 20:15:13
CVE-2022-32221
2022-12-05 22:15:10
cve
cve
CVE-2023-23916
2023-02-23 20:15:13
CVE-2022-32221
2022-12-05 22:15:10
aix
aix
AIX is vulnerable to security restrictions bypass due to curl
2023-05-26 09:26:13
cloudlinux
cloudlinux
curl: Fix of CVE-2022-32221
2022-12-15 17:42:45
hackerone
hackerone
curl: CVE-2022-32221: POST following PUT confusion
2022-09-18 23:27:44
Internet Bug Bounty: POST following PUT confusion
2022-10-26 14:34:05
Internet Bug Bounty: HTTP multi-header compression denial of service
2023-02-24 15:01:59
ubuntu
ubuntu
curl vulnerability
2022-10-26 00:00:00
curl vulnerabilities
2023-02-27 00:00:00
suse
suse
Security update for curl (important)
2022-10-26 00:00:00
Security update for curl (important)
2022-10-27 00:00:00
wolfi
wolfi
CVE-2022-32221 vulnerabilities
2024-06-26 15:33:03
debian
debian
[SECURITY] [DLA 3341-1] curl security update
2023-02-24 11:17:04
[SECURITY] [DSA 5365-1] curl security update
2023-02-27 22:00:09
[SECURITY] [DSA 5330-1] curl security update
2023-01-27 17:53:54
redos
redos
ROS-20221222-02
2022-12-22 00:00:00
amazon
amazon
Medium: curl
2023-04-13 19:01:00
Medium: curl
2023-03-02 22:36:00
slackware
slackware
[slackware-security] curl
2023-02-15 19:51:33
freebsd
freebsd
curl -- multiple vulnerabilities
2023-02-15 00:00:00
cloudfoundry
cloudfoundry
USN-5891-1: curl vulnerabilities | Cloud Foundry
2023-04-20 00:00:00