diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2022-04-27 21:43:51 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2022-04-28 13:29:49 +0200 |
| commit | cf5d75750640be00bf9d826189628a96ed17248c (patch) | |
| tree | 96506a3841148bd122e784b6b524df0096236cbf /Slackware-HOWTO | |
| parent | dfafa379401441229ad529bfa45564a368ef575a (diff) | |
| download | current-20220427214351_15.0.tar.gz current-20220427214351_15.0.tar.xz | |
Wed Apr 27 21:43:51 UTC 202220220427214351_15.0
patches/packages/curl-7.83.0-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
OAUTH2 bearer bypass in connection re-use.
Credential leak on redirect.
Bad local IPv6 connection reuse.
Auth/cookie leak on redirect.
For more information, see:
https://curl.se/docs/CVE-2022-22576.html
https://curl.se/docs/CVE-2022-27774.html
https://curl.se/docs/CVE-2022-27775.html
https://curl.se/docs/CVE-2022-27776.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
(* Security fix *)
Diffstat (limited to 'Slackware-HOWTO')
0 files changed, 0 insertions, 0 deletions