FEDORA-2017-3eec07cb06 — security update for curl

stable

curl-7.53.1-6.fc26

FEDORA-2017-3eec07cb06 created by kdudka 7 years ago for Fedora 26

fix switching off SSL session id when client cert is used (CVE-2017-7468)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-3eec07cb06

This update has been submitted for testing by kdudka.

7 years ago

This update has been pushed to testing.

7 years ago

filiperosset commented & provided feedback 7 years ago

karma

no regressions noted

pwalter commented & provided feedback 7 years ago

karma

Works

besser82 commented & provided feedback 7 years ago

karma

Works great! LGTM! =)

This update has been submitted for stable by bodhi.

7 years ago

kdudka commented & provided feedback 7 years ago

Thanks for feedback!

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

curl-7.53.1-6.fc26

BZ#1443384 CVE-2017-7468 curl: TLS session resumption client cert bypass [fedora-all]

curl-7.53.1-6.fc26

Automated Test Results

None