MGASA-2022-0405

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2022-0405.html
Import Source
https://advisories.mageia.org/MGASA-2022-0405.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2022-0405
Upstream
Published
2022-11-01T22:58:59Z
Modified
2026-04-16T04:41:14Z
Summary
Updated curl packages fix security vulnerability
Details

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. (CVE-2022-32221)

References
Credits

Affected packages

Mageia:8 / curl

Package

Name
curl
Purl
pkg:rpm/mageia/curl?arch=source&distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.74.0-1.9.mga8

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2022-0405.json"