Mageia 2021-0438: curl security update | LinuxSecurity.com

Advisories

What Are You Looking For?

Popular Tags

Contribute

Advisories This Week: 279

MGASA-2021-0438 - Updated curl packages fix security vulnerability

Publication date: 23 Sep 2021
URL: https://advisories.mageia.org/MGASA-2021-0438.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2021-22945,
     CVE-2021-22946,
     CVE-2021-22947

UAF and double-free in MQTT sending. (CVE-2021-22945)

Protocol downgrade required TLS bypassed. (CVE-2021-22946)

STARTTLS protocol injection via MITM. (CVE-2021-22947)

References:
- https://bugs.mageia.org/show_bug.cgi?id=29461
- https://curl.se/docs/CVE-2021-22945.html
- https://curl.se/docs/CVE-2021-22946.html
- https://curl.se/docs/CVE-2021-22947.html
- https://ubuntu.com/security/notices/USN-5079-1
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/J64OFB3I6OV4T3FD3PVSPTCKGUJCXUXX/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947

SRPMS:
- 8/core/curl-7.74.0-1.4.mga8

Mageia 2021-0438: curl security update

UAF and double-free in MQTT sending

Summary

UAF and double-free in MQTT sending. (CVE-2021-22945)
Protocol downgrade required TLS bypassed. (CVE-2021-22946)
STARTTLS protocol injection via MITM. (CVE-2021-22947)

References

- https://bugs.mageia.org/show_bug.cgi?id=29461

- https://curl.se/docs/CVE-2021-22945.html

- https://curl.se/docs/CVE-2021-22946.html

- https://curl.se/docs/CVE-2021-22947.html

- https://ubuntu.com/security/notices/USN-5079-1

- https://lists.fedoraproject.org/archives/list/[email protected]/thread/J64OFB3I6OV4T3FD3PVSPTCKGUJCXUXX/

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947

Resolution

MGASA-2021-0438 - Updated curl packages fix security vulnerability

SRPMS

- 8/core/curl-7.74.0-1.4.mga8

Severity
Publication date: 23 Sep 2021
URL: https://advisories.mageia.org/MGASA-2021-0438.html
Type: security
CVE: CVE-2021-22945, CVE-2021-22946, CVE-2021-22947

News

Advisories

HOWTOs

Features

Open-Source VPN Protocols Compared: Why WireGuard is on the Rise!
Open Source OSINT Tools and Techniques
The Story Behind the Linux Security Quick Reference Guide
Benefits & Drawbacks of Using a VPN on Linux
How a WAF Could Improve the Security of Your Linux Web Applications

About Us

Powered By

Footer Logo

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy. 

Learn More About Our Cookie Policy