Name: | curl |
---|---|
Version: | 7.76.1 |
Release: | 23.el9_2.1 |
Architecture: | aarch64 |
Group: | Unspecified |
Size: | 696665 |
License: | MIT |
RPM: | curl-7.76.1-23.el9_2.1.aarch64.rpm |
Source RPM: | curl-7.76.1-23.el9_2.1.src.rpm |
Build Date: | Thu May 11 2023 |
Build Host: | build-ol9-aarch64.oracle.com |
Vendor: | Oracle America |
URL: | https://curl.se/ |
Summary: | A utility for getting files from remote servers (FTP, HTTP, and others) |
Description: | curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer resume, proxy tunneling and a busload of other useful tricks. |
- fix FTP too eager connection reuse (CVE-2023-27535)
- fix HTTP multi-header compression denial of service (CVE-2023-23916)
- smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)
- fix POST following PUT confusion (CVE-2022-32221)
- control code in cookie denial of service (CVE-2022-35252)
- fix unpreserved file permissions (CVE-2022-32207) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208)
- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix leak of SRP credentials in redirects (CVE-2022-27774)
- add missing tests to Makefile
- fix credential leak on redirect (CVE-2022-27774) - fix auth/cookie leak on redirect (CVE-2022-27776) - fix bad local IPv6 connection reuse (CVE-2022-27775) - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)