curl-7.76.1-19.el9

エラータID: AXSA:2023-4690:01

Release date: 
Thursday, January 12, 2023 - 06:39
Subject: 
curl-7.76.1-19.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Low
Description: 

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: bad local IPv6 connection reuse (CVE-2022-27775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the MIRACLE LINUX 9.1 Release Notes linked from the References section.

CVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. curl-7.76.1-19.el9.src.rpm
    MD5: 7d5456151aa54bf5c26dc1205f7c9ef5
    SHA-256: 0dbaa95e2ccca30c1309ed1e5eee2b76960fc6c4893e6596cf43cdaf3e1614a0
    Size: 2.39 MB

Asianux Server 9 for x86_64
  1. curl-7.76.1-19.el9.x86_64.rpm
    MD5: 2f29ca853fc0a63946cbb10a5872e36e
    SHA-256: f312f2cba8b570812d69994d1adbcfcf8fad1e67ee198fab265dc8d9fa6ee10b
    Size: 295.78 kB
  2. curl-minimal-7.76.1-19.el9.x86_64.rpm
    MD5: f422076bd60fd6e39b7172654e90ebe4
    SHA-256: 98e4d1b82268eca3d1279009acc564b446390a35f59e1afa10d54ad3c15afd17
    Size: 129.12 kB
  3. libcurl-7.76.1-19.el9.x86_64.rpm
    MD5: a36092d79f4a7fc2cabf45ffe1aa5ddf
    SHA-256: 2961bd6b82de3a39c946c8a6227e0c811088a097620149412e6ee208841132bc
    Size: 285.11 kB
  4. libcurl-devel-7.76.1-19.el9.x86_64.rpm
    MD5: d9b1d7994e58d389f6eba13e735e8d36
    SHA-256: c4e66100e66271a6e0202d2a8a3f3c08bac25f1573d8e2b505dced040c03dbab
    Size: 851.00 kB
  5. libcurl-minimal-7.76.1-19.el9.x86_64.rpm
    MD5: 008d29c5a4cd42fd99a5d8c2f96f9155
    SHA-256: 6a1e7e15f1202693baa518cf8d2c4726964aa0270425c0343f0a2894b322f390
    Size: 226.87 kB
  6. libcurl-7.76.1-19.el9.i686.rpm
    MD5: a6e4db782ed51d2636bd6715ff91644a
    SHA-256: 9ef06945e9dcc9bb8a9830c2fa107528c3e3c60d12a8fcdadb070064ee241b97
    Size: 312.02 kB
  7. libcurl-devel-7.76.1-19.el9.i686.rpm
    MD5: e86d76c5db4911af8210ccac42841141
    SHA-256: 64114780ab95a7a88ee0934e43be78d4ec5928070e2ee6f120b770f8d875ed99
    Size: 851.01 kB
  8. libcurl-minimal-7.76.1-19.el9.i686.rpm
    MD5: d04293eeface93fdd9780d9432cae659
    SHA-256: 37dcda80e1f03bd9af4ea85e676dd3e7a48679835a2d33b524070b459ae181d1
    Size: 247.12 kB