RHSA-2024:1601: Moderate: curl security and bug fix update
Moderate: curl security and bug fix update
Other sources
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.Security Fix(es): curl: information disclosure by exploiting a mixed case flaw (CVE-2023-46218) curl: more POST-after-PUT confusion (CVE-2023-28322) curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): libssh (curl sftp) not trying password auth (BZ#2240033) libssh: cap SFTP packet size sent (RHEL-5485)
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1601?
The severity of RHSA-2024:1601 is classified as Moderate.
How do I fix RHSA-2024:1601?
To fix RHSA-2024:1601, you should update the curl package to version 7.61.1-33.el8_9.5 or higher.
Which systems are affected by RHSA-2024:1601?
RHSA-2024:1601 affects various Red Hat Enterprise Linux systems including ARM 64, Power, x86_64, and IBM z Systems.
What does RHSA-2024:1601 address?
RHSA-2024:1601 addresses security vulnerabilities and bug fixes related to the curl package.
Is there a specific package version required for RHSA-2024:1601 compliance?
Yes, the required package version for compliance with RHSA-2024:1601 is 7.61.1-33.el8_9.5.