Linux · Security advisory · August 20, 2024

ELSA-2024-5654: Security update for 4 packages

ELSA-2024-5654, released August 20, 2024, fixes 1 CVE across 4 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.3608
98th percentile

Fixed package versions

ProductReleaseFixed in
curlol 80:7.61.1-34.el8_10.2
libcurlol 80:7.61.1-34.el8_10.2
libcurl-develol 80:7.61.1-34.el8_10.2
libcurl-minimalol 80:7.61.1-34.el8_10.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-2398 curl: Multiple issues in curl 8.6 0.3608 None reported
Showing 1 to 1 of 1 1