oraclelinux

virt:kvm_utils security update

libvirt [5.7.0-34.el8] - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019] - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019] - qemuDomainBlockCopyCommon: Record updated flags to...

4.6 CVSS

2022-08-08T00:00:00

oraclelinux

virt:ol and virt-devel:ol security, bug fix, and enhancement update

libvirt [8.0.0-5.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-5.2.el8] - cpu_map: Disable cpu64-rhel for host-model and baseline (rhbz#2084030) - cputest: Drop some old artificial baseline tests...

5.0 CVSS

2022-08-05T00:00:00

redhat

(RHSA-2022:5821) Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

5.0 CVSS

2022-08-02T07:04:52

almalinux

ALSA-2022:5821: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update (Moderate)

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

5.0 CVSS

2022-08-02T00:00:00

debian

[SECURITY] [DSA 5197-1] curl security update

Debian Security Advisory DSA-5197-1 security@debian.org https://www.debian.org/security/ Markus Koschany August 01, 2022 https://www.debian.org/security/faq Package : curl CVE ID : CVE-2021-22898 CVE-2021-22924...

7.5 CVSS

2022-08-01T16:58:44

ubuntu

PHP vulnerability

It was discovered that PHP incorrectly handled certain memory operations when obtaining file information. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary...

2022-07-25T00:00:00

fedora

[SECURITY] Fedora 35 Update: curl-7.79.1-5.fc35

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

7.5 CVSS

2022-07-15T01:36:25

ubuntu

GnuPG vulnerability

USN-5503-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Demi Marie Obenour discovered that GnuPG incorrectly handled injection in the status message. A remote attacker could possibly use this...

5.8 CVSS

2022-07-12T00:00:00

debian

[SECURITY] [DSA 5179-1] php7.4 security update

Debian Security Advisory DSA-5179-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff July 08, 2022 https://www.debian.org/security/faq Package : php7.4 CVE ID : CVE-2022-31625 CVE-2022-31626...

6.8 CVSS

2022-07-08T19:27:23

rocky

curl security update

An update for curl is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

5.5 CVSS

2022-07-07T20:12:21

debiancve

CVE-2022-32208

When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the...

4.3 CVSS

2022-07-07T13:15:00

debiancve

CVE-2022-32207

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...

7.5 CVSS

2022-07-07T13:15:00

debiancve

CVE-2022-32206

curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable "links" in this "decompression chain" was unbounded, allowing a malicious server to insert a virtually...

4.3 CVSS

2022-07-07T13:15:00

debiancve

CVE-2022-32205

A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger...

4.3 CVSS

2022-07-07T13:15:00

ubuntu

PHP regression

USN-5479-1 fixed vulnerabilities in PHP. Unfortunately that update for CVE-2022-31625 was incomplete for Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Charles Fol discovered that PHP incorrectly handled initializing certain arrays...

6.8 CVSS

2022-07-07T00:00:00

amazon

Medium: curl

Issue Overview: A vulnerability was found in curl. This issue occurs because curl can reuse a previously created connection even when a TLS or SSH-related option is changed that should have prohibited reuse. This flaw leads to an authentication bypass, either by mistake or by a malicious actor....

5.0 CVSS

2022-07-06T03:01:00

photon

Important Photon OS Security Update - PHSA-2022-0207

Updates of ['curl', 'redis', 'openssl'] packages of Photon OS have been...

7.5 CVSS

2022-07-06T00:00:00

mageia

Updated curl packages fix security vulnerability

Set-Cookie denial of service. (CVE-2022-32205) HTTP compression denial of service. (CVE-2022-32206) Unpreserved file permissions. (CVE-2022-32207) FTP-KRB bad message verification....

7.5 CVSS

2022-07-05T19:11:26

cloudlinux

Fixed CVE-2022-27782 in curl

CVE-2022-27782: add missing checks of ssl and ssh options during matching a connection for...

5.0 CVSS

2022-07-04T19:12:03

oraclelinux

qemu-kvm security and bug fix update

[6.2.0-11.el9_0.3] - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2071102] - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2075635] - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2075640] - Resolves: bz#2071102 (RHEL 9.0 guest with...

5.0 CVSS

2022-07-04T00:00:00

affectedPackage.packageName:"curl"

virt:kvm_utils security update

virt:ol and virt-devel:ol security, bug fix, and enhancement update

(RHSA-2022:5821) Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

ALSA-2022:5821: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update (Moderate)

[SECURITY] [DSA 5197-1] curl security update

PHP vulnerability

[SECURITY] Fedora 35 Update: curl-7.79.1-5.fc35

GnuPG vulnerability

[SECURITY] [DSA 5179-1] php7.4 security update

curl security update

CVE-2022-32208

CVE-2022-32207

CVE-2022-32206

CVE-2022-32205

PHP regression

Medium: curl

Important Photon OS Security Update - PHSA-2022-0207

Updated curl packages fix security vulnerability

Fixed CVE-2022-27782 in curl

qemu-kvm security and bug fix update