stable

curl-8.2.1-3.fc39

FEDORA-2023-0f8d1871d8 created by jamacku 11 months ago for Fedora 39
  • fix cookie injection with none file (CVE-2023-38546)
  • fix SOCKS5 heap buffer overflow (CVE-2023-38545)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-0f8d1871d8

This update has been submitted for testing by jamacku.

11 months ago

This update's test gating status has been changed to 'waiting'.

11 months ago

jamacku edited this update.

11 months ago

This update's test gating status has been changed to 'passed'.

11 months ago

This update has been pushed to testing.

11 months ago
User Icon bojan commented & provided feedback 11 months ago
karma

Works.

User Icon adamwill commented & provided feedback 11 months ago
karma

Working fine with no critpath consequences here.

This update can be pushed to stable now if the maintainer wishes

11 months ago
User Icon atim provided feedback 11 months ago
karma

This update has been submitted for stable by bodhi.

There is an ongoing freeze; this will be pushed to stable after the freeze is over.

11 months ago

no issues

karma
BZ#2241933 CVE-2023-38545 curl: heap based buffer overflow in the SOCKS5 proxy handshake
BZ#2243182 CVE-2023-38545 curl: a heap based buffer overflow in the SOCKS5 proxy handshake [fedora-all]
karma
User Icon jamacku commented & provided feedback 11 months ago

Thank you for testing!

This update has been pushed to stable.

11 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
5
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
11 months ago
in testing
11 months ago
in stable
11 months ago
modified
11 months ago
approved
11 months ago
BZ#2241933 CVE-2023-38545 curl: heap based buffer overflow in the SOCKS5 proxy handshake
0
1
BZ#2243182 CVE-2023-38545 curl: a heap based buffer overflow in the SOCKS5 proxy handshake [fedora-all]
0
1

Automated Test Results

Test Cases

0 0 Test Case curl