Re: CVE-2022-43552
Jeffrey Walton via curl-users <[email protected]>
| Newsgroups | gmane.comp.web.curl.general |
|---|---|
| Message-ID | <CAH8yC8kuNwNC4VraN4eo3qqSzLhW97ijtfqk7SfH8mmYvGgHog@mail.gmail.com> |
On Thu, Aug 10, 2023 at 1:41 PM Bob via curl-users <[email protected]> wrote: > > Our security scanner is flagging our RHEL systems for CVE-2022-43552. It looks like Redhat will not update the curl package on RHEL 7. > > The curl page https://curl.se/docs/CVE-2022-43552.html states in the recommendations to: > A - Upgrade curl to version 7.87.0 > B - Apply the patch to your local version > C - Avoid using SMB and TELNET or disable HTTP proxy use > > We are looking for a way to mitigate this until we can upgrade to RHEL 8 and wanted to know how to "disable HTTP proxy use" on the system as the recommendations state. Any help would be appreciated. Thank you I _think_ you can add no_proxy to .curlrc. See https://curl.se/docs/manpage.html . Jeff -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users Etiquette: https://curl.se/mail/etiquette.html