ALAS-2022-246

Amazon Linux 2022 Security Advisory: ALAS-2022-246
Advisory Release Date: 2022-12-06 16:44 Pacific
Advisory Updated Date: 2022-12-06 16:44 Pacific
Severity: Medium
Issue Overview:


Affected Packages:

curl


Issue Correction:
Run yum update curl to update your system.

New Packages:
aarch64:
    libcurl-minimal-debuginfo-7.86.0-1.amzn2022.0.1.aarch64
    curl-minimal-debuginfo-7.86.0-1.amzn2022.0.1.aarch64
    curl-minimal-7.86.0-1.amzn2022.0.1.aarch64
    curl-7.86.0-1.amzn2022.0.1.aarch64
    libcurl-debuginfo-7.86.0-1.amzn2022.0.1.aarch64
    curl-debugsource-7.86.0-1.amzn2022.0.1.aarch64
    curl-debuginfo-7.86.0-1.amzn2022.0.1.aarch64
    libcurl-7.86.0-1.amzn2022.0.1.aarch64
    libcurl-minimal-7.86.0-1.amzn2022.0.1.aarch64
    libcurl-devel-7.86.0-1.amzn2022.0.1.aarch64

src:
    curl-7.86.0-1.amzn2022.0.1.src

x86_64:
    libcurl-debuginfo-7.86.0-1.amzn2022.0.1.x86_64
    curl-debuginfo-7.86.0-1.amzn2022.0.1.x86_64
    curl-minimal-debuginfo-7.86.0-1.amzn2022.0.1.x86_64
    libcurl-minimal-debuginfo-7.86.0-1.amzn2022.0.1.x86_64
    libcurl-minimal-7.86.0-1.amzn2022.0.1.x86_64
    libcurl-7.86.0-1.amzn2022.0.1.x86_64
    curl-minimal-7.86.0-1.amzn2022.0.1.x86_64
    curl-debugsource-7.86.0-1.amzn2022.0.1.x86_64
    curl-7.86.0-1.amzn2022.0.1.x86_64
    libcurl-devel-7.86.0-1.amzn2022.0.1.x86_64

Additional References

Red Hat: CVE-2022-32221, CVE-2022-35260, CVE-2022-42915, CVE-2022-42916

Mitre: CVE-2022-32221, CVE-2022-35260, CVE-2022-42915, CVE-2022-42916