stable

curl-8.2.1-3.fc39

FEDORA-2023-0f8d1871d8 created by jamacku 7 months ago for Fedora 39
  • fix cookie injection with none file (CVE-2023-38546)
  • fix SOCKS5 heap buffer overflow (CVE-2023-38545)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-0f8d1871d8

This update has been submitted for testing by jamacku.

7 months ago

This update's test gating status has been changed to 'waiting'.

7 months ago

jamacku edited this update.

7 months ago

This update's test gating status has been changed to 'passed'.

7 months ago

This update has been pushed to testing.

7 months ago
User Icon bojan commented & provided feedback 7 months ago
karma

Works.

User Icon adamwill commented & provided feedback 7 months ago
karma

Working fine with no critpath consequences here.

This update can be pushed to stable now if the maintainer wishes

7 months ago
User Icon atim provided feedback 7 months ago
karma

This update has been submitted for stable by bodhi.

There is an ongoing freeze; this will be pushed to stable after the freeze is over.

7 months ago

no issues

karma
BZ#2241933 CVE-2023-38545 curl: heap based buffer overflow in the SOCKS5 proxy handshake
BZ#2243182 CVE-2023-38545 curl: a heap based buffer overflow in the SOCKS5 proxy handshake [fedora-all]
karma
User Icon jamacku commented & provided feedback 7 months ago

Thank you for testing!

This update has been pushed to stable.

7 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
5
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
7 months ago
in testing
7 months ago
in stable
7 months ago
modified
7 months ago
approved
7 months ago
BZ#2241933 CVE-2023-38545 curl: heap based buffer overflow in the SOCKS5 proxy handshake
0
1
BZ#2243182 CVE-2023-38545 curl: a heap based buffer overflow in the SOCKS5 proxy handshake [fedora-all]
0
1

Automated Test Results

Test Cases

0 0 Test Case curl