MGASA-2023-0263
- Source
- https://advisories.mageia.org/MGASA-2023-0263.html
- Import Source
- https://advisories.mageia.org/MGASA-2023-0263.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2023-0263
- Related
- Published
- 2023-09-24T22:16:18Z
- Modified
- 2023-09-24T20:20:03Z
- Summary
- Updated curl packages fix security vulnerability
- Details
-
TELNET option IAC injection. (CVE-2023-27533)
SFTP path ~ resolving discrepancy. (CVE-2023-27534)
FTP too eager connection reuse. (CVE-2023-27535)
GSS delegation too eager connection re-use. (CVE-2023-27536)
HSTS double free. (CVE-2023-27537)
SSH connection too eager reuse still. (CVE-2023-27538)
UAF in SSH sha256 fingerprint check. (CVE-2023-28319)
siglongjmp race condition. (CVE-2023-28320)
IDN wildcard match. (CVE-2023-28321)
more POST-after-PUT confusion. (CVE-2023-28322)
HTTP headers eat all memory. (CVE-2023-38039)
- References
-
- https://advisories.mageia.org/MGASA-2023-0263.html
- https://bugs.mageia.org/show_bug.cgi?id=31703
- https://curl.se/docs/CVE-2023-27533.html
- https://curl.se/docs/CVE-2023-27534.html
- https://curl.se/docs/CVE-2023-27535.html
- https://curl.se/docs/CVE-2023-27536.html
- https://curl.se/docs/CVE-2023-27537.html
- https://curl.se/docs/CVE-2023-27538.html
- https://ubuntu.com/security/notices/USN-5964-1
- https://curl.se/docs/CVE-2023-28319.html
- https://curl.se/docs/CVE-2023-28320.html
- https://curl.se/docs/CVE-2023-28321.html
- https://curl.se/docs/CVE-2023-28322.html
- https://lists.suse.com/pipermail/sle-security-updates/2023-May/014913.html
- https://curl.se/docs/CVE-2023-32001.html
- https://curl.se/docs/CVE-2023-38039.html
- https://ubuntu.com/security/notices/USN-6363-1
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / curl
Package
- Name
- curl
- Purl
- pkg:rpm/mageia/curl?distro=mageia-8
Mageia:9 / curl
Package
- Name
- curl
- Purl
- pkg:rpm/mageia/curl?distro=mageia-9