Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 620
Alerts This Week
Warning Icon 1 620

Oracle Linux 8 ELSA-2022-5313 Moderate: Curl Security Fixes

oracle
Calendar Grey July 1, 2022
Oracle Linux Logo Esm H88
Red Hat Enterprise Linux releases ELSA-2022-5432 addressing important patches for openssl flaws, promoting improved safety.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[7.61.1-22.el8_6.3] - fix too eager reuse of TLS and SSH connections (CVE-2022-27782) [7.61.1-22.el8_6.2] - fix invalid type in printf() argument detected by Coverity [7.61.1-22.el8_6.1] - fix credential leak on redirect (CVE-2022-27774) - fix auth/cookie leak on redirect (CVE-2022-27776) - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)

Topics%20covered

Topics Covered

security advisory moderate severity curl update ssl security connection reuse oracle linux

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/curl-7.61.1-22.el8_6.3.src.rpm

x86_64

curl-7.61.1-22.el8_6.3.x86_64.rpm libcurl-7.61.1-22.el8_6.3.i686.rpm libcurl-7.61.1-22.el8_6.3.x86_64.rpm libcurl-devel-7.61.1-22.el8_6.3.i686.rpm libcurl-devel-7.61.1-22.el8_6.3.x86_64.rpm libcurl-minimal-7.61.1-22.el8_6.3.i686.rpm libcurl-minimal-7.61.1-22.el8_6.3.x86_64.rpm

aarch64

curl-7.61.1-22.el8_6.3.aarch64.rpm libcurl-7.61.1-22.el8_6.3.aarch64.rpm libcurl-devel-7.61.1-22.el8_6.3.aarch64.rpm libcurl-minimal-7.61.1-22.el8_6.3.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2022-22576 CVE-2022-27774 CVE-2022-27776 CVE-2022-27782

Topics%20covered

Topics Covered

security advisory moderate severity curl update ssl security connection reuse oracle linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.