Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity update

Oracle Linux 8 ELSA-2023-4523 Moderate: Curl Connection Fixes

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-4523 https://linux.oracle.com/errata/ELSA-2023-4523.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: curl-7.61.1-30.el8_8.3.x86_64.rpm libcurl-7.61.1-30.el8_8.3.i686.rpm libcurl-7.61.1-30.el8_8.3.x86_64.rpm libcurl-devel-7.61.1-30.el8_8.3.i686.rpm libcurl-devel-7.61.1-30.el8_8.3.x86_64.rpm libcurl-minimal-7.61.1-30.el8_8.3.i686.rpm libcurl-minimal-7.61.1-30.el8_8.3.x86_64.rpm aarch64: curl-7.61.1-30.el8_8.3.aarch64.rpm libcurl-7.61.1-30.el8_8.3.aarch64.rpm libcurl-devel-7.61.1-30.el8_8.3.aarch64.rpm libcurl-minimal-7.61.1-30.el8_8.3.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates//curl-7.61.1-30.el8_8.3.src.rpm Related CVEs: CVE-2023-27536 CVE-2023-28321 Description of changes: [7.61.1-30.el8_8.3] - GSS delegation too eager connection re-use (CVE-2023-27536) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Notice ELSA-2023-4592: Critical updates for curl resolving vulnerabilities in connection revisions and wildcard validation.. Oracle Linux,Curl Security,Security Update. . Severity: Important. LinuxSecurity.com Team

Aug 10, 2023 •Important Oracle