FEDORA-2019-427a0ba9e3 — security update for curl

stable

curl-7.61.1-7.fc29

FEDORA-2019-427a0ba9e3 created by kdudka 5 years ago for Fedora 29

xattr: strip credentials from any URL that is stored (CVE-2018-20483)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-427a0ba9e3

This update has been submitted for testing by kdudka.

5 years ago

This update has been pushed to testing.

5 years ago

besser82 commented & provided feedback 5 years ago

karma

Works great! LGTM! =)

flexo3001 commented & provided feedback 5 years ago

karma

works for me

cserpentis commented & provided feedback 5 years ago

karma

works for me

This update has been submitted for batched by bodhi.

5 years ago

kdudka commented & provided feedback 5 years ago

Thank you for testing the update!

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

curl-7.61.1-7.fc29

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1662852 CVE-2018-20483 curl: wget: Information exposure in set_file_metadata function in xattr.c [fedora-all]

curl-7.61.1-7.fc29

Automated Test Results

ignored