[CLSA-2023:1681491163] curl: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2023-04-14
Description:
- CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations
Updated packages:
  • curl-7.19.7-59.el6.tuxcare.els8.x86_64.rpm
    sha:6871aea244271d11f462dd749327260f0974330a
  • libcurl-7.19.7-59.el6.tuxcare.els8.i686.rpm
    sha:6185e85d6b599447970802e933bf0e4c4519fedb
  • libcurl-7.19.7-59.el6.tuxcare.els8.x86_64.rpm
    sha:2c2942cd094af1de7d92b9337f538dd96c0c8556
  • libcurl-devel-7.19.7-59.el6.tuxcare.els8.i686.rpm
    sha:1bed229f22e50adb232f23d1ba90de47c29140d5
  • libcurl-devel-7.19.7-59.el6.tuxcare.els8.x86_64.rpm
    sha:7d32f876bf87897ae7ec6c73359476fd62f3a100
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.