ELSA-2024-5654

ELSA-2024-5654 - curl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-08-20

Description

[7.61.1-34.el8_10.2]
- provide common cleanup method for push headers (CVE-2024-2398)

[7.61.1-34.el8_10.1]
- fix incorrect backport of bz2229800 (RHEL-44684)

Related CVEs

CVE-2024-2398

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	curl-7.61.1-34.el8_10.2.src.rpm	13ca0dfb7ceb47346765e5494947992f53f863d6e4b3d2bba2a149224e28f241	-	ol8_aarch64_baseos_latest
	curl-7.61.1-34.el8_10.2.src.rpm	13ca0dfb7ceb47346765e5494947992f53f863d6e4b3d2bba2a149224e28f241	-	ol8_aarch64_u10_baseos_patch
	curl-7.61.1-34.el8_10.2.aarch64.rpm	ef3765942c760fbd7b0723debc90c065f2b1921f7ce9790ba2d2012b703c76f1	-	ol8_aarch64_baseos_latest
	curl-7.61.1-34.el8_10.2.aarch64.rpm	ef3765942c760fbd7b0723debc90c065f2b1921f7ce9790ba2d2012b703c76f1	-	ol8_aarch64_u10_baseos_patch
	libcurl-7.61.1-34.el8_10.2.aarch64.rpm	7a69c5f458ad64824e5a5237473956a52e12fa6f08aac8e891db19d9099810b2	-	ol8_aarch64_baseos_latest
	libcurl-7.61.1-34.el8_10.2.aarch64.rpm	7a69c5f458ad64824e5a5237473956a52e12fa6f08aac8e891db19d9099810b2	-	ol8_aarch64_u10_baseos_patch
	libcurl-devel-7.61.1-34.el8_10.2.aarch64.rpm	5165e68547f0ac449c05d2a224749347cf8d4cc9f1944a187a5c6c68db70dbfc	-	ol8_aarch64_baseos_latest
	libcurl-devel-7.61.1-34.el8_10.2.aarch64.rpm	5165e68547f0ac449c05d2a224749347cf8d4cc9f1944a187a5c6c68db70dbfc	-	ol8_aarch64_u10_baseos_patch
	libcurl-minimal-7.61.1-34.el8_10.2.aarch64.rpm	b60aa7ec74baec210ba595b632b21c730a73c40d8372f1672e376900a23c3a85	-	ol8_aarch64_baseos_latest
	libcurl-minimal-7.61.1-34.el8_10.2.aarch64.rpm	b60aa7ec74baec210ba595b632b21c730a73c40d8372f1672e376900a23c3a85	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	curl-7.61.1-34.el8_10.2.src.rpm	13ca0dfb7ceb47346765e5494947992f53f863d6e4b3d2bba2a149224e28f241	-	ol8_x86_64_baseos_latest
	curl-7.61.1-34.el8_10.2.src.rpm	13ca0dfb7ceb47346765e5494947992f53f863d6e4b3d2bba2a149224e28f241	-	ol8_x86_64_u10_baseos_patch
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_23.1.18.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_23.1.19.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_23.1.20.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_23.1.21.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_23.1.22.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_23.1.23.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_24.1.10.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_24.1.4.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_24.1.5.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_24.1.6.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_24.1.7.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_24.1.8.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_24.1.9.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_25.1.0.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_25.1.1.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_25.1.2.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	exadata_dbserver_25.1.3.0.0_x86_64_base
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	ol8_x86_64_baseos_latest
	curl-7.61.1-34.el8_10.2.x86_64.rpm	0f86073fc8ba5e92c3c74547fb4bb9da1c41bac0f51af01c50e644e3bc80b285	-	ol8_x86_64_u10_baseos_patch
	libcurl-7.61.1-34.el8_10.2.i686.rpm	62ce9bab44c5b9a05e626ea0493d27032e74253115669fe8e25825365aa29f95	-	ol8_x86_64_baseos_latest
	libcurl-7.61.1-34.el8_10.2.i686.rpm	62ce9bab44c5b9a05e626ea0493d27032e74253115669fe8e25825365aa29f95	-	ol8_x86_64_u10_baseos_patch
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_23.1.18.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_23.1.19.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_23.1.20.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_23.1.21.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_23.1.22.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_23.1.23.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_24.1.10.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_24.1.4.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_24.1.5.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_24.1.6.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_24.1.7.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_24.1.8.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_24.1.9.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_25.1.0.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_25.1.1.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_25.1.2.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	exadata_dbserver_25.1.3.0.0_x86_64_base
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	ol8_x86_64_baseos_latest
	libcurl-7.61.1-34.el8_10.2.x86_64.rpm	41660caf6b23728d88d5a90d94d0895b5e4364fb55daa624091a4db72f23bc0f	-	ol8_x86_64_u10_baseos_patch
	libcurl-devel-7.61.1-34.el8_10.2.i686.rpm	1a99116cb1fa89a73eadabe1568635b210100f233ec7b8a5b8a2b3bb9697b643	-	ol8_x86_64_baseos_latest
	libcurl-devel-7.61.1-34.el8_10.2.i686.rpm	1a99116cb1fa89a73eadabe1568635b210100f233ec7b8a5b8a2b3bb9697b643	-	ol8_x86_64_u10_baseos_patch
	libcurl-devel-7.61.1-34.el8_10.2.x86_64.rpm	b52e6fab66de1f7054840a479070955b3a18199c60aa1353e329b48b672c896a	-	ol8_x86_64_baseos_latest
	libcurl-devel-7.61.1-34.el8_10.2.x86_64.rpm	b52e6fab66de1f7054840a479070955b3a18199c60aa1353e329b48b672c896a	-	ol8_x86_64_u10_baseos_patch
	libcurl-minimal-7.61.1-34.el8_10.2.i686.rpm	c380139732368693833f920d82003ffb7bbf7814f00bab05bee90d85a7880d2d	-	ol8_x86_64_baseos_latest
	libcurl-minimal-7.61.1-34.el8_10.2.i686.rpm	c380139732368693833f920d82003ffb7bbf7814f00bab05bee90d85a7880d2d	-	ol8_x86_64_u10_baseos_patch
	libcurl-minimal-7.61.1-34.el8_10.2.x86_64.rpm	7af55a3e206bf7fbc84874e9525b1a4fa2079538ed540c4581cf6c8b735b22a4	-	ol8_x86_64_baseos_latest
	libcurl-minimal-7.61.1-34.el8_10.2.x86_64.rpm	7af55a3e206bf7fbc84874e9525b1a4fa2079538ed540c4581cf6c8b735b22a4	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team