FEDORA-2018-bc65ab5014 — security update for curl

stable

curl-7.59.0-2.fc28

FEDORA-2018-bc65ab5014 created by kdudka 7 years ago for Fedora 28

http2: mark the connection for close on GOAWAY
new upstream release (7.59.0)
FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
LDAP NULL pointer dereference (CVE-2018-1000121)
RTSP RTP buffer over-read (CVE-2018-1000122)
ftp: fix typo in recursive callback detection for seeking

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-bc65ab5014

This update has been submitted for testing by kdudka.

7 years ago

kdudka edited this update.

7 years ago

This update has been submitted for testing by kdudka.

7 years ago

This update has been pushed to testing.

7 years ago

sassam commented & provided feedback 7 years ago

karma

Works for me.

piotrdrag commented & provided feedback 7 years ago

karma

Seems to work fine.

pwalter commented & provided feedback 7 years ago

karma

Works

This update has been submitted for batched by bodhi.

7 years ago

kdudka commented 7 years ago

Thank you for testing the update!

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

6 years ago

modified

7 years ago

Builds

curl-7.59.0-2.fc28

BZ#1555209 CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122 curl: various flaws [fedora-all]

curl-7.59.0-2.fc28

Automated Test Results

passed