libcurl might reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer.
https://curl.se/docs/CVE-2022-22576.html
Created curl tracking bugs for this issue: Affects: fedora-all [bug 2079167] Created mingw-curl tracking bugs for this issue: Affects: fedora-all [bug 2079168]
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:5245 https://access.redhat.com/errata/RHSA-2022:5245
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:5313 https://access.redhat.com/errata/RHSA-2022:5313
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-22576