Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-2524

Низкий

ALT-PU-2022-2524: package curl update to version 7.85.0-alt1

Источник
errata.altlinux.org
Дата публикации
31.08.2022
Дата обновления
31.08.2022
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades curl to version 7.85.0-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 3.7
ubuntu
около 4 лет назад

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

CVSS3: 3.1
redhat
около 4 лет назад

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

CVSS3: 3.7
nvd
около 4 лет назад

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

CVSS3: 3.7
msrc
около 4 лет назад

When curl is used to retrieve and parse cookies from a HTTP(S) server itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

CVSS3: 3.7
debian
около 4 лет назад

When curl is used to retrieve and parse cookies from a HTTP(S) server, ...