MGASA-2022-0250 Updated curl packages fix security vulnerability

Set-Cookie denial of service. CVE-2022-32205 HTTP compression denial of service. CVE-2022-32206 Unpreserved file permissions. CVE-2022-32207 FTP-KRB bad message verification. CVE-2022-32208...

Updated curl packages fix security vulnerability

Set-Cookie denial of service. CVE-2022-32205 HTTP compression denial of service. CVE-2022-32206 Unpreserved file permissions. CVE-2022-32207 FTP-KRB bad message verification. CVE-2022-32208...

CLSA-2022-1656961923 Fixed CVE-2022-27782 in curl

CVE-2022-27782: add missing checks of ssl and ssh options during matching a connection for reuse...

Fixed CVE-2022-27782 in curl

CVE-2022-27782: add missing checks of ssl and ssh options during matching a connection for reuse...

CLSA-2022-1656961578 Fixed CVE-2022-27782 in curl

CVE-2022-27782: add missing checks of ssl and ssh options during matching a connection for reuse...

FreeBSD : mediawiki -- multiple vulnerabilities (5ab54ea0-fa94-11ec-996c-080027b24e86)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5ab54ea0-fa94-11ec-996c-080027b24e86 advisory. - A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...

Fedora: Security Advisory for curl (FEDORA-2022-8bd3bf5b40)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-27779 affecting package curl for versions less than 7.83.1-1

CVE-2022-27779 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30115 affecting package curl for versions less than 7.83.1-1

CVE-2022-30115 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27780 affecting package curl for versions less than 7.83.1-1

CVE-2022-27780 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27781 affecting package curl for versions less than 7.83.1-1

CVE-2022-27781 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27778 affecting package curl for versions less than 7.83.1-1

CVE-2022-27778 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

Privilege Escalation

curl is vulnerable to Privilege Escalation. The vulnerability exists due to the unpreserved file permissions in the library which will accidentally widen the permissions for the target file leaving the updated file accessible to more users than intended...

Denial Of Service (DoS)

curl is vulnerable to denial of service attacks. A malicious user is able to cause an application crash via serving excessive amounts of set-cookie headers in a HTTP response to curl...

USN-5499-1: curl vulnerabilities

Florian Kohnhuser discovered that curl incorrectly handled returning a TLS server’s certificate chain details. A remote attacker could possibly use this issue to cause curl to stop responding, resulting in a denial of service. CVE-2022-27781 Harry Sintonen discovered that curl incorrectly handled...

[SECURITY] Fedora 36 Update: curl-7.82.0-6.fc36

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

curl: auth/cookie leak on redirect

A vulnerability was found in curl. This security flaw allows leak authentication or cookie header data on HTTP redirects to the same host but another port number. Sending the same set of headers to a server on a different port number is a problem for applications that pass on custom Authorization...

curl: credential leak on redirect

A vulnerability was found in curl. This security flaw allows leaking credentials to other servers when it follows redirects from auth-protected HTTPS URLs to other protocols and port numbers...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...