MGASA-2023-0345 - Updated curl packages fix security vulnerabilities

Publication date: 13 Dec 2023
URL: https://advisories.mageia.org/MGASA-2023-0345.html
Type: security
Affected Mageia releases: 8, 9
CVE: CVE-2023-46218,
     CVE-2023-46219

The updated Curl Mageia 8 and 9 packages contain a patch to fix
CVE-2023-46218
The Mageia 9 packages als contain a patch to fix CVE-2023-46219. Curl in
Mageia 8 does not need that patch because it is not affected by that
issue.

References:
- https://bugs.mageia.org/show_bug.cgi?id=32599
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219

SRPMS:
- 8/core/curl-7.74.0-1.15.mga8
- 9/core/curl-7.88.1-3.3.mga9

Mageia 2023-0345: curl security update

The updated Curl Mageia 8 and 9 packages contain a patch to fix CVE-2023-46218 The Mageia 9 packages als contain a patch to fix CVE-2023-46219

Summary

The updated Curl Mageia 8 and 9 packages contain a patch to fix CVE-2023-46218 The Mageia 9 packages als contain a patch to fix CVE-2023-46219. Curl in Mageia 8 does not need that patch because it is not affected by that issue.

References

- https://bugs.mageia.org/show_bug.cgi?id=32599

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219

Resolution

MGASA-2023-0345 - Updated curl packages fix security vulnerabilities

SRPMS

- 8/core/curl-7.74.0-1.15.mga8

- 9/core/curl-7.88.1-3.3.mga9

Severity
Publication date: 13 Dec 2023
URL: https://advisories.mageia.org/MGASA-2023-0345.html
Type: security
CVE: CVE-2023-46218, CVE-2023-46219

Related News