FEDORA-2022-411f088574 — security update for curl

obsolete

curl-7.79.1-3.fc35

FEDORA-2022-411f088574 created by kdudka 11 months ago for Fedora 35

fix credential leak on redirect (CVE-2022-27774)
fix auth/cookie leak on redirect (CVE-2022-27776)
fix bad local IPv6 connection reuse (CVE-2022-27775)
fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)

This update has been submitted for testing by kdudka.

11 months ago

This update's test gating status has been changed to 'waiting'.

11 months ago

This update has been pushed to testing.

11 months ago

This update's test gating status has been changed to 'passed'.

11 months ago

geraldosimiao provided feedback 11 months ago

karma

kdudka edited this update.

New build(s):

curl-7.79.1-3.fc35

Removed build(s):

curl-7.79.1-2.fc35

Karma has been reset.

10 months ago

This update has been submitted for testing by kdudka.

10 months ago

This update has been pushed to testing.

10 months ago

geraldosimiao provided feedback 10 months ago

karma

This update has been obsoleted by curl-7.79.1-4.fc35.

10 months ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

curl-7.79.1-3.fc35

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

11 months ago

in testing

10 months ago

modified

10 months ago

BZ#2079167 CVE-2022-22576 curl: OAUTH2 bearer bypass in connection re-use [fedora-all]

BZ#2079169 CVE-2022-27774 curl: credential leak on redirect [fedora-all]

BZ#2079171 CVE-2022-27775 curl: bad local IPv6 connection reuse [fedora-all]

BZ#2079174 CVE-2022-27776 curl: auth/cookie leak on redirect [fedora-all]

curl-7.79.1-3.fc35

Automated Test Results

passed