Name: | libcurl |
---|---|
Version: | 7.76.1 |
Release: | 23.el9_2.1 |
Architecture: | i686 |
Group: | Unspecified |
Size: | 710776 |
License: | MIT |
RPM: | libcurl-7.76.1-23.el9_2.1.i686.rpm |
Source RPM: | curl-7.76.1-23.el9_2.1.src.rpm |
Build Date: | Thu May 11 2023 |
Build Host: | build-ol9-i386.oracle.com |
Vendor: | Oracle America |
URL: | https://curl.se/ |
Summary: | A library for getting files from web servers |
Description: | libcurl is a free and easy-to-use client-side URL transfer library, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. libcurl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, Kerberos4), file transfer resume, http proxy tunneling and more. |
- fix FTP too eager connection reuse (CVE-2023-27535)
- fix HTTP multi-header compression denial of service (CVE-2023-23916)
- smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)
- fix POST following PUT confusion (CVE-2022-32221)
- control code in cookie denial of service (CVE-2022-35252)
- fix unpreserved file permissions (CVE-2022-32207) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208)
- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix leak of SRP credentials in redirects (CVE-2022-27774)
- add missing tests to Makefile
- fix credential leak on redirect (CVE-2022-27774) - fix auth/cookie leak on redirect (CVE-2022-27776) - fix bad local IPv6 connection reuse (CVE-2022-27775) - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)