Is DX NetOps Spectrum affected by vulnerability CVE-2023-38545 & CVE-2023-38546?

Products

• DX NetOps
• CA Spectrum

Issue/Introduction

Is DX NetOps Spectrum affected by vulnerability CVE-2023-38545 & CVE-2023-38546?

Environment

All Supported Releases

Resolution

DX NetOps Spectrum is not affected by CVE-2023-38545 & CVE-2023-38546.

The libcurl library is not shipped with the Linux installation media. The libcurl library is included with the Windows installation media as part of Cygwin, but the version is outside the range of this vulnerability.

Cygwin Package Information
Package             Version       Status
libcurl4            7.56.1-1      OK