CVE-2022-43552

Bob via curl-users <[email protected]> Thu, 10 Aug 2023 11:11:10 -0600

Newsgroups	gmane.comp.web.curl.general
Message-ID	<[email protected]>

Hello,

Our security scanner is flagging our RHEL systems for CVE-2022-43552.  It looks like Redhat will not update the curl package on RHEL 7.  

The curl page https://curl.se/docs/CVE-2022-43552.html states in the recommendations to:
A - Upgrade curl to version 7.87.0
B - Apply the patch to your local version
C - Avoid using SMB and TELNET or disable HTTP proxy use

We are looking for a way to mitigate this until we can upgrade to RHEL 8 and wanted to know how to "disable HTTP proxy use" on the system as the recommendations state.  Any help would be appreciated.    Thank you 
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users
Etiquette:   https://curl.se/mail/etiquette.html