Ubuntu: Security Advisory (USN-4129-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4466-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3993-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3498-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

Summary Security Bulletin: Multiple vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak Vulnerability Details CVEID:CVE-2022-27782 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass security restrictions, caused by an easy connection reuse flaw for TLS and SSH. ...

Oracle Linux 9 : curl (ELSA-2022-6157)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6157 advisory. - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 Tenable has extracted the preceding descripti...

curl security update

7.76.1-14.el90.5 - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 - fix FTP-KRB bad message verification CVE-2022-32208...

CVE-2022-27781 affecting package curl 7.76.0-9

CVE-2022-27781 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-27782 affecting package curl 7.76.0-9

CVE-2022-27782 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-32205 affecting package curl 7.76.0-9

CVE-2022-32205 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-27779 affecting package curl 7.76.0-9

CVE-2022-27779 affecting package curl 7.76.0-9. This CVE either no longer is or was never applicable...

CVE-2022-32208 affecting package curl 7.76.0-9

CVE-2022-32208 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-27780 affecting package curl 7.76.0-9

CVE-2022-27780 affecting package curl 7.76.0-9. This CVE either no longer is or was never applicable...

CVE-2022-32207 affecting package curl 7.76.0-9

CVE-2022-32207 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-32206 affecting package curl 7.76.0-9

CVE-2022-32206 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-30115 affecting package curl 7.76.0-9

CVE-2022-30115 affecting package curl 7.76.0-9. This CVE either no longer is or was never applicable...

curl: HTTP compression denial of service

A vulnerability was found in curl. This issue occurs because the number of acceptable "links" in the "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps. This flaw leads to a denial of service, either by mistake or by a...

curl: FTP-KRB bad message verification

A vulnerability was found in curl. This issue occurs because it mishandles message verification failures when curl does FTP transfers secured by krb5. This flaw makes it possible for a Man-in-the-middle attack to go unnoticed and allows data injection into the client...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

curl: Unpreserved file permissions

A vulnerability was found in curl. This issue occurs because when curl saves cookies, alt-svc, and HSTS data to local files, it makes the operation atomic by finalizing the process with a rename from a temporary name to the final target file name. This flaw leads to unpreserved file permissions,...