An update for curl is now available for openEuler-22.03-LTS Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2023-1960 Final 1.0 1.0 2023-12-22 Initial 2023-12-22 2023-12-22 openEuler SA Tool V1.0 2023-12-22 curl security update An update for curl is now available for openEuler-22.03-LTS. cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols. Security Fix(es): When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use. (CVE-2023-46219) An update for curl is now available for openEuler-22.03-LTS. openEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Low curl https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1960 https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2023-46219 https://nvd.nist.gov/vuln/detail/CVE-2023-46219 openEuler-22.03-LTS libcurl-devel-7.79.1-25.oe2203.aarch64.rpm curl-debugsource-7.79.1-25.oe2203.aarch64.rpm curl-debuginfo-7.79.1-25.oe2203.aarch64.rpm curl-7.79.1-25.oe2203.aarch64.rpm libcurl-7.79.1-25.oe2203.aarch64.rpm curl-help-7.79.1-25.oe2203.noarch.rpm curl-7.79.1-25.oe2203.src.rpm curl-debuginfo-7.79.1-25.oe2203.x86_64.rpm libcurl-devel-7.79.1-25.oe2203.x86_64.rpm curl-debugsource-7.79.1-25.oe2203.x86_64.rpm curl-7.79.1-25.oe2203.x86_64.rpm libcurl-7.79.1-25.oe2203.x86_64.rpm When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use. 2023-12-22 CVE-2023-46219 openEuler-22.03-LTS Low 4.0 AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N curl security update 2023-12-22 https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1960