Stay Secure with the Latest Linux Advisories

security advisorysecurity updatemoderate severity

Oracle Linux 8 ELSA-2021-3583 Moderate: Curl Network Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2021-3582 https://linux.oracle.com/errata/ELSA-2021-3582.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: curl-7.61.1-18.el8_4.1.x86_64.rpm libcurl-7.61.1-18.el8_4.1.i686.rpm libcurl-7.61.1-18.el8_4.1.x86_64.rpm libcurl-devel-7.61.1-18.el8_4.1.i686.rpm libcurl-devel-7.61.1-18.el8_4.1.x86_64.rpm libcurl-minimal-7.61.1-18.el8_4.1.i686.rpm libcurl-minimal-7.61.1-18.el8_4.1.x86_64.rpm aarch64: curl-7.61.1-18.el8_4.1.aarch64.rpm libcurl-7.61.1-18.el8_4.1.aarch64.rpm libcurl-devel-7.61.1-18.el8_4.1.aarch64.rpm libcurl-minimal-7.61.1-18.el8_4.1.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates/curl-7.61.1-18.el8_4.1.src.rpm Related CVEs: CVE-2021-22922 CVE-2021-22923 CVE-2021-22924 Description of changes: [7.61.1-18.el8_4.1] - fix bad connection reuse due to flawed path name checks (CVE-2021-22924) - disable metalink support to fix the following vulnerabilities CVE-2021-22923 - metalink download sends credentials CVE-2021-22922 - wrong content via metalink not discarded _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Notice ELSA-2021-3583 delivers a significant patch addressing vulnerabilities in curl for Oracle Linux 8.. Oracle Security Update,curl Patch,Oracle Linux 8. . LinuxSecurity.com Team

Sep 21, 2021 Oracle