Red Hat Security Advisory

RHSA-2023:2650

curl security update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libcurl-devel-7.76.1-23.el9_2.1
Red Hat Enterprise Linux BaseOS (v. 9) curl-7.76.1-23.el9_2.1, curl-minimal-7.76.1-23.el9_2.1, libcurl-7.76.1-23.el9_2.1 +1

Fixes 1 record

TI-2023-12259 CVE-2023-27535 · GHSA-q9fm-68jc-87x3

Authentication bypass in https://github.com/curl/curl

MEDIUM 60

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01803 Published 2023-03-30 Partial fix CWE-305