Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: MGASA-2022-0405 Critical Curl Security Advisory

mageia
Calendar Grey November 1, 2022
Dist Mageia Esm H88
Tackling vulnerabilities in libcurl for HTTP(S) communications in Mageia 8 to promote secure data exchanges.
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, ...

Summary

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. (CVE-2022-32221)

References

- https://bugs.mageia.org/show_bug.cgi?id=31031

- https://curl.se/docs/CVE-2022-32221.html

- https://www.cve.org/CVERecord?id=CVE-2022-32221

Topics%20covered

Topics Covered

security advisory critical data transmission curl libcurl Mageia HTTP transfer

Resolution

SRPMS

- 8/core/curl-7.74.0-1.9.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 01 Nov 2022
URL: https://advisories.mageia.org/MGASA-2022-0405.html
Type: security
CVE: CVE-2022-32221

Topics%20covered

Topics Covered

security advisory critical data transmission curl libcurl Mageia HTTP transfer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here