Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Oracle Linux 9 ELSA-2023-1701 Moderate: curl Denial Of Service Advisory

oracle
Calendar Grey April 12, 2023
Scroller Oracle
Oracle Linux 9 patch tackles vulnerability related to curl's handling of HTTP multi-header compression, addressing potential DoS risks.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[7.76.1-19.el9_1.2] - fix HTTP multi-header compression denial of service (CVE-2023-23916)

Topics%20covered

Topics Covered

security advisory moderate denial of service security issue update curl Oracle Linux

SRPMs

https://oss.oracle.com:443/ol9/SRPMS-updates//curl-7.76.1-19.el9_1.2.src.rpm

x86_64

curl-7.76.1-19.el9_1.2.x86_64.rpm curl-minimal-7.76.1-19.el9_1.2.x86_64.rpm libcurl-7.76.1-19.el9_1.2.i686.rpm libcurl-7.76.1-19.el9_1.2.x86_64.rpm libcurl-devel-7.76.1-19.el9_1.2.i686.rpm libcurl-devel-7.76.1-19.el9_1.2.x86_64.rpm libcurl-minimal-7.76.1-19.el9_1.2.i686.rpm libcurl-minimal-7.76.1-19.el9_1.2.x86_64.rpm

aarch64

curl-7.76.1-19.el9_1.2.aarch64.rpm curl-minimal-7.76.1-19.el9_1.2.aarch64.rpm libcurl-7.76.1-19.el9_1.2.aarch64.rpm libcurl-devel-7.76.1-19.el9_1.2.aarch64.rpm libcurl-minimal-7.76.1-19.el9_1.2.aarch64.rpm

Related CVEs: CVE-2023-23916

Topics%20covered

Topics Covered

security advisory moderate denial of service security issue update curl Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.