Red Hat Security AdvisoryRHSA-2024:1129
curl security update
Released 2024-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) libcurl-devel-7.76.1-26.el9_3.3
- Red Hat Enterprise Linux BaseOS (v. 9) curl-7.76.1-26.el9_3.3, curl-minimal-7.76.1-26.el9_3.3, libcurl-7.76.1-26.el9_3.3 +1
Fixes 1 record
Priority HIGH 68
This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01685 · Published 2023-12-07 · Partial fix · 7.46.0 CWE-178
