Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Oracle Linux 9 ELSA-2023-6745 Critical: Curl Cookie Injection Issue

oracle
Calendar Grey November 17, 2023
Oracle Linux Logo Esm H88
Oracle Linux 9 patch notes feature essential updates for wget resolving header manipulation vulnerabilities.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[7.76.1-26.el9_3.2] - fix cookie injection with none file (CVE-2023-38546) [7.76.1-26.el9_3.1] - socks: return error if hostname too long for remote resolve (CVE-2023-38545)

Topics%20covered

Topics Covered

security advisory security update critical fix curl Oracle Linux cookie injection

SRPMs

https://oss.oracle.com:443/ol9/SRPMS-updates//curl-7.76.1-26.el9_3.2.src.rpm

x86_64

curl-7.76.1-26.el9_3.2.x86_64.rpm curl-minimal-7.76.1-26.el9_3.2.x86_64.rpm libcurl-7.76.1-26.el9_3.2.i686.rpm libcurl-7.76.1-26.el9_3.2.x86_64.rpm libcurl-devel-7.76.1-26.el9_3.2.i686.rpm libcurl-devel-7.76.1-26.el9_3.2.x86_64.rpm libcurl-minimal-7.76.1-26.el9_3.2.i686.rpm libcurl-minimal-7.76.1-26.el9_3.2.x86_64.rpm

aarch64

curl-7.76.1-26.el9_3.2.aarch64.rpm curl-minimal-7.76.1-26.el9_3.2.aarch64.rpm libcurl-7.76.1-26.el9_3.2.aarch64.rpm libcurl-devel-7.76.1-26.el9_3.2.aarch64.rpm libcurl-minimal-7.76.1-26.el9_3.2.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-38545 CVE-2023-38546

Topics%20covered

Topics Covered

security advisory security update critical fix curl Oracle Linux cookie injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here