RHSA-2024:0428: CVEs fixed (Red Hat)

RHSA-2024:0428 fixes 3 tracked CVEs. Affected systems and fixed versions.

• CVE-2023-27536 MEDIUM 5.9 UPGRADE MITIGATE An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse p
• CVE-2022-43552 MEDIUM 5.9 UPGRADE UPGRADE A use after free vulnerability exists in curl <7.87.0
• CVE-2023-28322 LOW 3.7 UPGRADE MITIGATE An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might err

Applies to

• RHEL 8.6 Extended Update Support · fixed in curl-7.61.1-22.el8_6.12

← Back to latest CVEs