Red Hat Security AdvisoryRHSA-2023:7743
curl security update
Released 2023-12-12 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) curl-7.29.0-59.el7_9.2, libcurl-7.29.0-59.el7_9.2
- Red Hat Enterprise Linux Client Optional (v. 7) libcurl-devel-7.29.0-59.el7_9.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcurl-devel-7.29.0-59.el7_9.2
- Red Hat Enterprise Linux Server (v. 7) curl-7.29.0-59.el7_9.2, libcurl-7.29.0-59.el7_9.2, libcurl-7.29.0-59.el7_9.2.ppc +2
- Red Hat Enterprise Linux Workstation (v. 7) curl-7.29.0-59.el7_9.2, libcurl-7.29.0-59.el7_9.2, libcurl-devel-7.29.0-59.el7_9.2
Fixes 1 record
Priority LOW 32
A use after free vulnerability exists in curl <7.87.0.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02714 · Published 2023-02-09 · Partial fix CWE-416