FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

curl -- multiple vulnerabilities

Affected packages
		curl	<	8.1.0

Details

VuXML ID	a4f8bb03-f52f-11ed-9859-080027083a05
Discovery	2023-03-21
Entry	2023-05-19

Wei Chong Tan, Harry Sintonen, and Hiroki Kurosawa reports:

This update fixes 4 security vulnerabilities:

Medium CVE-2023-28319: UAF in SSH sha256 fingerprint check. Reported by Wei Chong Tan on 2023-03-21

Low CVE-2023-28320: siglongjmp race condition. Reported by Harry Sintonen on 2023-04-02

Low CVE-2023-28321: IDN wildcard match. Reported by Hiroki Kurosawa on 2023-04-17

Low CVE-2023-28322: more POST-after-PUT confusion. Reported by Hiroki Kurosawa on 2023-04-19

[source]

References

CVE Name	CVE-2023-28319
CVE Name	CVE-2023-28320
CVE Name	CVE-2023-28321
CVE Name	CVE-2023-28322
URL	https://curl.se/docs/CVE-2023-28319.html
URL	https://curl.se/docs/CVE-2023-28320.html
URL	https://curl.se/docs/CVE-2023-28321.html
URL	https://curl.se/docs/CVE-2023-28322.html