ALSA-2021:4511
ALSA-2021:4511 · Moderate: curl security and bug fix update
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876) * curl: TELNET stack contents disclosure (CVE-2021-22898) * curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure (CVE-2021-22925) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
curl AlmaLinux:8
- Intervalos de versiones afectados
- ECOSYSTEM: < 7.61.1-22.el8
Actualiza a 7.61.1-22.el8
libcurl AlmaLinux:8
- Intervalos de versiones afectados
- ECOSYSTEM: < 7.61.1-22.el8
Actualiza a 7.61.1-22.el8
libcurl-devel AlmaLinux:8
- Intervalos de versiones afectados
- ECOSYSTEM: < 7.61.1-22.el8
Actualiza a 7.61.1-22.el8
libcurl-minimal AlmaLinux:8
- Intervalos de versiones afectados
- ECOSYSTEM: < 7.61.1-22.el8
Actualiza a 7.61.1-22.el8