{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Medium" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"curl security update", "category":"general", "title":"Synopsis" }, { "text":"An update for curl is now available for openEuler-20.03-LTS-SP1, openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS.", "category":"general", "title":"Summary" }, { "text":"cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.\n\nSecurity Fix(es):\n\nThis security flaw in curl allows to reuse an OAUTH2 authenticated connection without properly ensuring that the connection is authenticated with the same credentials set by this transport, this issue can lead to authentication bypasses, either by mistake or by malicious actors.(CVE-2022-22576)\n\nWhen asked, curl does an HTTP(S) redirect. curl also supports authentication. When providing a user and password for a URL with a given hostname, curl makes an effort not to pass these credentials to other hosts in redirects unless permissions with special options are granted. This \"same host check\" has been flawed since its introduction. It does not work with cross-protocol redirection, nor does it treat different port numbers as separate hosts. This results in leaking credentials to other servers when curl redirects from authentication protected HTTP(S) URLs to other protocols and port numbers. It could also leak TLS SRP credentials in this way. By default, curl only allows redirects to HTTP(S) and FTP(S), but you can ask to allow redirects to all curl-supported protocols.(CVE-2022-27774)\n\nThis issue with curl occurs due to a logical bug where the configuration matching function does not take into account the IPv6 address zone id, which can cause curl to reuse the wrong connection when one transfer uses the zone id and subsequent transfers use another.(CVE-2022-27775)\n\nThis security flaw in curl allows leaking authentication or cookie header data over HTTP to redirect to the same host but a different port number, for applications passing custom Authorization: or Cookie: headers to the same set of headers Sending to servers on different port numbers is a problem, and these headers often contain privacy-sensitive information or data.(CVE-2022-27776)", "category":"general", "title":"Description" }, { "text":"An update for curl is now available for openEuler-20.03-LTS-SP1, openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Medium", "category":"general", "title":"Severity" }, { "text":"curl", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2022-1659", "category":"self", "url":"https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1659" }, { "summary":"CVE-2022-22576", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2022-22576&packageName=curl" }, { "summary":"CVE-2022-27774", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2022-27774&packageName=curl" }, { "summary":"CVE-2022-27775", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2022-27775&packageName=curl" }, { "summary":"CVE-2022-27776", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2022-27776&packageName=curl" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22576" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27774" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27775" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27776" }, { "summary":"openEuler-SA-2022-1659 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2022/csaf-openeuler-sa-2022-1659.json" } ], "title":"An update for curl is now available for openEuler-20.03-LTS-SP1, openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS", "tracking":{ "initial_release_date":"2022-05-18T09:40:02+08:00", "revision_history":[ { "date":"2022-05-18T09:40:02+08:00", "summary":"Initial", "number":"1.0.0" }, { "date":"2024-10-31T09:40:02+08:00", "summary":"final", "number":"2.0.0" } ], "generator":{ "date":"2024-10-31T09:40:02+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2024-10-31T09:40:02+08:00", "id":"openEuler-SA-2022-1659", "version":"2.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"openEuler-20.03-LTS-SP1", "name":"openEuler-20.03-LTS-SP1" }, "name":"openEuler-20.03-LTS-SP1", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"openEuler-20.03-LTS-SP3", "name":"openEuler-20.03-LTS-SP3" }, "name":"openEuler-20.03-LTS-SP3", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"openEuler-22.03-LTS", "name":"openEuler-22.03-LTS" }, "name":"openEuler-22.03-LTS", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "name":"curl-7.71.1-13.oe1.aarch64.rpm" }, "name":"curl-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "name":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm" }, "name":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "name":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm" }, "name":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"libcurl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "name":"libcurl-7.71.1-13.oe1.aarch64.rpm" }, "name":"libcurl-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "name":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm" }, "name":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "name":"curl-7.71.1-13.oe1.aarch64.rpm" }, "name":"curl-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "name":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm" }, "name":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "name":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm" }, "name":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"libcurl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "name":"libcurl-7.71.1-13.oe1.aarch64.rpm" }, "name":"libcurl-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "name":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm" }, "name":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-7.79.1-4.oe2203.aarch64.rpm", "name":"curl-7.79.1-4.oe2203.aarch64.rpm" }, "name":"curl-7.79.1-4.oe2203.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-debuginfo-7.79.1-4.oe2203.aarch64.rpm", "name":"curl-debuginfo-7.79.1-4.oe2203.aarch64.rpm" }, "name":"curl-debuginfo-7.79.1-4.oe2203.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-debugsource-7.79.1-4.oe2203.aarch64.rpm", "name":"curl-debugsource-7.79.1-4.oe2203.aarch64.rpm" }, "name":"curl-debugsource-7.79.1-4.oe2203.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"libcurl-7.79.1-4.oe2203.aarch64.rpm", "name":"libcurl-7.79.1-4.oe2203.aarch64.rpm" }, "name":"libcurl-7.79.1-4.oe2203.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"libcurl-devel-7.79.1-4.oe2203.aarch64.rpm", "name":"libcurl-devel-7.79.1-4.oe2203.aarch64.rpm" }, "name":"libcurl-devel-7.79.1-4.oe2203.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-7.71.1-13.oe1.src.rpm(20.03-LTS-SP1)", "name":"curl-7.71.1-13.oe1.src.rpm" }, "name":"curl-7.71.1-13.oe1.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-7.71.1-13.oe1.src.rpm(20.03-LTS-SP3)", "name":"curl-7.71.1-13.oe1.src.rpm" }, "name":"curl-7.71.1-13.oe1.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-7.79.1-4.oe2203.src.rpm", "name":"curl-7.79.1-4.oe2203.src.rpm" }, "name":"curl-7.79.1-4.oe2203.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-help-7.71.1-13.oe1.noarch.rpm(20.03-LTS-SP1)", "name":"curl-help-7.71.1-13.oe1.noarch.rpm" }, "name":"curl-help-7.71.1-13.oe1.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-help-7.71.1-13.oe1.noarch.rpm(20.03-LTS-SP3)", "name":"curl-help-7.71.1-13.oe1.noarch.rpm" }, "name":"curl-help-7.71.1-13.oe1.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-help-7.79.1-4.oe2203.noarch.rpm", "name":"curl-help-7.79.1-4.oe2203.noarch.rpm" }, "name":"curl-help-7.79.1-4.oe2203.noarch.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "name":"curl-7.71.1-13.oe1.x86_64.rpm" }, "name":"curl-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "name":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm" }, "name":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "name":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm" }, "name":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"libcurl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "name":"libcurl-7.71.1-13.oe1.x86_64.rpm" }, "name":"libcurl-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1" }, "product_id":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "name":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm" }, "name":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "name":"curl-7.71.1-13.oe1.x86_64.rpm" }, "name":"curl-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "name":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm" }, "name":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "name":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm" }, "name":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"libcurl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "name":"libcurl-7.71.1-13.oe1.x86_64.rpm" }, "name":"libcurl-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "name":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm" }, "name":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-7.79.1-4.oe2203.x86_64.rpm", "name":"curl-7.79.1-4.oe2203.x86_64.rpm" }, "name":"curl-7.79.1-4.oe2203.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-debuginfo-7.79.1-4.oe2203.x86_64.rpm", "name":"curl-debuginfo-7.79.1-4.oe2203.x86_64.rpm" }, "name":"curl-debuginfo-7.79.1-4.oe2203.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"curl-debugsource-7.79.1-4.oe2203.x86_64.rpm", "name":"curl-debugsource-7.79.1-4.oe2203.x86_64.rpm" }, "name":"curl-debugsource-7.79.1-4.oe2203.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"libcurl-7.79.1-4.oe2203.x86_64.rpm", "name":"libcurl-7.79.1-4.oe2203.x86_64.rpm" }, "name":"libcurl-7.79.1-4.oe2203.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS" }, "product_id":"libcurl-devel-7.79.1-4.oe2203.x86_64.rpm", "name":"libcurl-devel-7.79.1-4.oe2203.x86_64.rpm" }, "name":"libcurl-devel-7.79.1-4.oe2203.x86_64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "name":"curl-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "name":"curl-debuginfo-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "name":"curl-debugsource-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"libcurl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "name":"libcurl-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "name":"libcurl-devel-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "name":"curl-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-debuginfo-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "name":"curl-debuginfo-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-debugsource-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "name":"curl-debugsource-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"libcurl-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "name":"libcurl-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"libcurl-devel-7.71.1-13.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "name":"libcurl-devel-7.71.1-13.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-7.79.1-4.oe2203.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "name":"curl-7.79.1-4.oe2203.aarch64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-debuginfo-7.79.1-4.oe2203.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "name":"curl-debuginfo-7.79.1-4.oe2203.aarch64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-debugsource-7.79.1-4.oe2203.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "name":"curl-debugsource-7.79.1-4.oe2203.aarch64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"libcurl-7.79.1-4.oe2203.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "name":"libcurl-7.79.1-4.oe2203.aarch64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"libcurl-devel-7.79.1-4.oe2203.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "name":"libcurl-devel-7.79.1-4.oe2203.aarch64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-7.71.1-13.oe1.src.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "name":"curl-7.71.1-13.oe1.src as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-7.71.1-13.oe1.src.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "name":"curl-7.71.1-13.oe1.src as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-7.79.1-4.oe2203.src.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "name":"curl-7.79.1-4.oe2203.src as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-help-7.71.1-13.oe1.noarch.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "name":"curl-help-7.71.1-13.oe1.noarch as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-help-7.71.1-13.oe1.noarch.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "name":"curl-help-7.71.1-13.oe1.noarch as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-help-7.79.1-4.oe2203.noarch.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "name":"curl-help-7.79.1-4.oe2203.noarch as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "name":"curl-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "name":"curl-debuginfo-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "name":"curl-debugsource-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"libcurl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "name":"libcurl-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP1", "product_reference":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP1)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "name":"libcurl-devel-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "name":"curl-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-debuginfo-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "name":"curl-debuginfo-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"curl-debugsource-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "name":"curl-debugsource-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"libcurl-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "name":"libcurl-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP3", "product_reference":"libcurl-devel-7.71.1-13.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "name":"libcurl-devel-7.71.1-13.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-7.79.1-4.oe2203.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "name":"curl-7.79.1-4.oe2203.x86_64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-debuginfo-7.79.1-4.oe2203.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "name":"curl-debuginfo-7.79.1-4.oe2203.x86_64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"curl-debugsource-7.79.1-4.oe2203.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "name":"curl-debugsource-7.79.1-4.oe2203.x86_64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"libcurl-7.79.1-4.oe2203.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "name":"libcurl-7.79.1-4.oe2203.x86_64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS", "product_reference":"libcurl-devel-7.79.1-4.oe2203.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64", "name":"libcurl-devel-7.79.1-4.oe2203.x86_64 as a component of openEuler-22.03-LTS" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2022-22576", "notes":[ { "text":"This security flaw in curl allows to reuse an OAUTH2 authenticated connection without properly ensuring that the connection is authenticated with the same credentials set by this transport, this issue can lead to authentication bypasses, either by mistake or by malicious actors.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ], "details":"curl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1659" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.6, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2022-22576" }, { "cve":"CVE-2022-27774", "notes":[ { "text":"When asked, curl does an HTTP(S) redirect. curl also supports authentication. When providing a user and password for a URL with a given hostname, curl makes an effort not to pass these credentials to other hosts in redirects unless permissions with special options are granted. This \"same host check\" has been flawed since its introduction. It does not work with cross-protocol redirection, nor does it treat different port numbers as separate hosts. This results in leaking credentials to other servers when curl redirects from authentication protected HTTP(S) URLs to other protocols and port numbers. It could also leak TLS SRP credentials in this way. By default, curl only allows redirects to HTTP(S) and FTP(S), but you can ask to allow redirects to all curl-supported protocols.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ], "details":"curl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1659" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.0, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2022-27774" }, { "cve":"CVE-2022-27775", "notes":[ { "text":"This issue with curl occurs due to a logical bug where the configuration matching function does not take into account the IPv6 address zone id, which can cause curl to reuse the wrong connection when one transfer uses the zone id and subsequent transfers use another.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ], "details":"curl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1659" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":2.6, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2022-27775" }, { "cve":"CVE-2022-27776", "notes":[ { "text":"This security flaw in curl allows leaking authentication or cookie header data over HTTP to redirect to the same host but a different port number, for applications passing custom Authorization: or Cookie: headers to the same set of headers Sending to servers on different port numbers is a problem, and these headers often contain privacy-sensitive information or data.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ], "details":"curl security update", "category":"vendor_fix", "url":"https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1659" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.aarch64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.aarch64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.aarch64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.aarch64", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.src", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.src", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.src", "openEuler-20.03-LTS-SP1:curl-help-7.71.1-13.oe1.noarch", "openEuler-20.03-LTS-SP3:curl-help-7.71.1-13.oe1.noarch", "openEuler-22.03-LTS:curl-help-7.79.1-4.oe2203.noarch", "openEuler-20.03-LTS-SP1:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP1:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debuginfo-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:curl-debugsource-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-7.71.1-13.oe1.x86_64", "openEuler-20.03-LTS-SP3:libcurl-devel-7.71.1-13.oe1.x86_64", "openEuler-22.03-LTS:curl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debuginfo-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:curl-debugsource-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-7.79.1-4.oe2203.x86_64", "openEuler-22.03-LTS:libcurl-devel-7.79.1-4.oe2203.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2022-27776" } ] }