FEDORA-2018-66c96e0024 — security update for curl

stable

curl-7.53.1-16.fc26

FEDORA-2018-66c96e0024 created by kdudka 7 years ago for Fedora 26

fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
fix LDAP NULL pointer dereference (CVE-2018-1000121)
fix RTSP RTP buffer over-read (CVE-2018-1000122)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-66c96e0024

This update has been submitted for testing by kdudka.

7 years ago

This update has been pushed to testing.

7 years ago

samoht0 commented & provided feedback 7 years ago

karma

works for me

filiperosset commented & provided feedback 7 years ago

karma

no regressions noted

pwalter commented & provided feedback 7 years ago

karma

Works

This update has been submitted for batched by bodhi.

7 years ago

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

curl-7.53.1-16.fc26

BZ#1555209 CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122 curl: various flaws [fedora-all]

curl-7.53.1-16.fc26

Automated Test Results

passed