Name: | curl |
---|---|
Version: | 7.76.1 |
Release: | 26.el9 |
Architecture: | aarch64 |
Group: | Unspecified |
Size: | 696673 |
License: | MIT |
RPM: | curl-7.76.1-26.el9.aarch64.rpm |
Source RPM: | curl-7.76.1-26.el9.src.rpm |
Build Date: | Thu Oct 26 2023 |
Build Host: | build-ol9-aarch64.oracle.com |
Vendor: | Oracle America |
URL: | https://curl.se/ |
Summary: | A utility for getting files from remote servers (FTP, HTTP, and others) |
Description: | curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer resume, proxy tunneling and a busload of other useful tricks. |
- unify the upload/method handling (CVE-2023-28322) - fix host name wildcard checking (CVE-2023-28321)
- adapt the fix of CVE-2023-27535 for RHEL 9 curl
- fix SSH connection too eager reuse still (CVE-2023-27538) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix SFTP path ~ resolving discrepancy (CVE-2023-27534) - fix TELNET option IAC injection (CVE-2023-27533)
- fix HTTP multi-header compression denial of service (CVE-2023-23916)
- smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)
- fix POST following PUT confusion (CVE-2022-32221)
- control code in cookie denial of service (CVE-2022-35252)
- fix unpreserved file permissions (CVE-2022-32207) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208)
- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix leak of SRP credentials in redirects (CVE-2022-27774)