--------------------------------------------------------------------- Fedora Legacy Test Update Notification FEDORALEGACY-2005-152917 Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152917 2005-06-20 --------------------------------------------------------------------- Name : curl Versions : rh73: curl-7.9.5-2.2.legacy Versions : rh9: curl-7.9.8-5.2.legacy Versions : fc1: curl-7.10.6-7.2.legacy Versions : fc2: curl-7.11.1-1.2.legacy Summary : A utility for getting files from remote servers Description : cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, FTP upload, HTTP post, and file transfer resume. --------------------------------------------------------------------- Update Information: Updated curl packages are now available. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. Multiple buffer overflow bugs were found in the way curl processes base64 encoded replies. If a victim can be tricked into visiting a URL with curl, a malicious web server could execute arbitrary code on a victim's machine. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0490 to this issue. All users of curl are advised to upgrade to these updated packages, which contain backported fixes for these issues. --------------------------------------------------------------------- Changelogs rh73: * Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.9.5-2.2.legacy - Added missing groff and bison BuildRequires * Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.9.5-2.1.legacy - Added patch for CAN-2005-0490 Multiple stack based buffer overflows in curl rh9: * Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.9.8-5.2.legacy - Added missing zlib-devel, groff and bison BuildRequires * Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.9.8-5.1.legacy - Added patch for CAN-2005-0490 Multiple stack based buffer overflows in curl fc1: * Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.10.6-7.2.legacy - Added missing zlib-devel, groff and bison BuildRequires * Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.10.6-7.1.legacy - Added patch for CAN-2005-0490 Multiple stack based buffer overflows in curl fc2: * Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.11.1-1.2.legacy - Added missing zlib-devel, groff, bison BuildRequires * Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 7.11.1-1.1.legacy - Added patch for CAN-2005-0490 Multiple stack based buffer overflows in curl --------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/ (sha1sums) rh73: 8032bf94d434873de3f02100fd8eb36b206cba02 redhat/7.3/updates-testing/i386/curl-7.9.5-2.2.legacy.i386.rpm 2d95c39024f58f3a7897e58da3da39dd297c8109 redhat/7.3/updates-testing/i386/curl-devel-7.9.5-2.2.legacy.i386.rpm 559d63a957091747972eb963a29642ef7c3835d7 redhat/7.3/updates-testing/SRPMS/curl-7.9.5-2.2.legacy.src.rpm rh9: ca02f070ca45c96cfb93157e88b81f96c4646051 redhat/9/updates-testing/i386/curl-7.9.8-5.2.legacy.i386.rpm 57329416fa302765f25ba963bf9a6d334a225e72 redhat/9/updates-testing/i386/curl-devel-7.9.8-5.2.legacy.i386.rpm e793df5a65927b98203c0308972389cc80896749 redhat/9/updates-testing/SRPMS/curl-7.9.8-5.2.legacy.src.rpm fc1: c083d601e3b6f1c54dede72bb635e0215bb6230b fedora/1/updates-testing/i386/curl-7.10.6-7.2.legacy.i386.rpm 835a427b82413d4ccc83a17dbc0ea0204dfd1e4a fedora/1/updates-testing/i386/curl-devel-7.10.6-7.2.legacy.i386.rpm cb59fc5fd7f74e1e5d407fe6fdd4d086e7f93bac fedora/1/updates-testing/SRPMS/curl-7.10.6-7.2.legacy.src.rpm fc2: c8c23e7748058bd6965efb188fc02fc27bc1f1c1 fedora/2/updates-testing/i386/curl-7.11.1-1.2.legacy.i386.rpm 401b44aeb653730fb6dcc7b83ecb88f9600f64cc fedora/2/updates-testing/i386/curl-devel-7.11.1-1.2.legacy.i386.rpm d0fbc3ee3137034a02cdc136959f7e119daae817 fedora/2/updates-testing/SRPMS/curl-7.11.1-1.2.legacy.src.rpm --------------------------------------------------------------------- Please test and comment in bugzilla.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- fedora-legacy-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-legacy-list
