RHSA-2023:7540: Low: curl security and bug fix update
Low: curl security and bug fix update
Other sources
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.Security Fix(es): curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): libssh (curl sftp) not trying password auth (BZ#2240032)
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:7540?
The severity of RHSA-2023:7540 is classified as low.
What is the impact of the vulnerability described in RHSA-2023:7540?
The impact of the vulnerability described in RHSA-2023:7540 is considered low.
How can I fix the vulnerability in RHSA-2023:7540?
To fix the vulnerability in RHSA-2023:7540, you should update the affected software to version 7.61.1-30.el8_8.6.
Where can I find more information about RHSA-2023:7540?
You can find more information about RHSA-2023:7540 on the Red Hat website at https://access.redhat.com/errata/RHSA-2023:7540.
Are there any known bugs related to RHSA-2023:7540?
Yes, there are known bugs related to RHSA-2023:7540. You can find more information about these bugs on the Red Hat Bugzilla website at https://bugzilla.redhat.com/show_bug.cgi?id=2240032 and https://bugzilla.redhat.com/show_bug.cgi?id=2241938.