ALT-PU-2014-2327: package curl update to version 7.39.0-alt1
Описание
This update upgrades curl to version 7.39.0-alt1.
Устраненные уязвимости11
Связанные уязвимости
ELSA-2015-2159: curl security, bug fix, and enhancement update (MODERATE)
ELSA-2015-1254: curl security, bug fix, and enhancement update (MODERATE)
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.