Another HSTS bypass via IDN. (CVE-2022-43551) HTTP Proxy deny use-after-free. (CVE-2022-43552) References: - https://bugs.mageia.org/show_bug.cgi?id=31306 . MGASA-2022-0483 - Updated curl packages fix security vulnerability Publication date: 30 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0483.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-43551, CVE-2022-43552 Another HSTS bypass via IDN. (CVE-2022-43551) HTTP Proxy deny use-after-free. (CVE-2022-43552) References: - https://bugs.mageia.org/show_bug.cgi?id=31306 - https://curl.se/docs/CVE-2022-43551.html - https://curl.se/docs/CVE-2022-43552.html - - https://lists.fedoraproject.org/archives/list/
Get the latest Linux and open source security news straight to your inbox.