Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

Debian 10 DLA-3341-1 Critical Update for Curl Denial Of Service

debian lts
Calendar Grey February 24, 2023
Dist Debian Esm H88
Important Debian LTS notice DLA-3342-1 addresses buffer overflow vulnerability in wget for Debian 10.
HTTP multi-header compression denial of service has been fixed in curl, a command line tool and library for transferring data with URLs

Summary

For Debian 10 buster, this problem has been fixed in version
7.64.0-4+deb10u5.

We recommend that you upgrade your curl packages.

For the detailed security status of curl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/curl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: curl
Version: 7.64.0-4+deb10u5
CVE ID: CVE-2023-23916
Debian Bug: 1031371

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.