Red Hat Security Advisory

RHSA-2023:3106

curl security and bug fix update

Released 2023-05-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) curl-7.61.1-30.el8_8.2, libcurl-7.61.1-30.el8_8.2, libcurl-devel-7.61.1-30.el8_8.2 +1

Fixes 1 record

TI-2023-12259 CVE-2023-27535 · GHSA-q9fm-68jc-87x3

Authentication bypass in https://github.com/curl/curl

MEDIUM 60

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01803 Published 2023-03-30 Partial fix CWE-305