Red Hat Security AdvisoryRHSA-2024:0452
curl security update
Released 2024-01-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.2) libcurl-devel-7.76.1-23.el9_2.6
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) curl-7.76.1-23.el9_2.6, curl-minimal-7.76.1-23.el9_2.6, libcurl-7.76.1-23.el9_2.6 +1
Fixes 1 record
Priority HIGH 68
This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01685 · Published 2023-12-07 · Partial fix · 7.46.0 CWE-178
