ALSA-2021:4511
ALSA-2021:4511 · Moderate: curl security and bug fix update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876) * curl: TELNET stack contents disclosure (CVE-2021-22898) * curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure (CVE-2021-22925) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
curl AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-22.el8
Mettez à jour vers 7.61.1-22.el8
libcurl AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-22.el8
Mettez à jour vers 7.61.1-22.el8
libcurl-devel AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-22.el8
Mettez à jour vers 7.61.1-22.el8
libcurl-minimal AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-22.el8
Mettez à jour vers 7.61.1-22.el8