ALT-PU-2015-1396: package curl update to version 7.42.0-alt1
Источник
errata.altlinux.org
Дата публикации
22.04.2015
Дата обновления
22.04.2015
Устраненные уязвимости
4
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container
Описание
This update upgrades curl to version 7.42.0-alt1.
Устраненные уязвимости4
Связанные уязвимости
CVSS3: 7.5
altlinux
около 12 лет назад
ALT-PU-2014-2327: package `curl` update to version 7.39.0-alt1
oracle-oval
почти 11 лет назад
ELSA-2015-2159: curl security, bug fix, and enhancement update (MODERATE)
oracle-oval
больше 11 лет назад
ELSA-2015-1254: curl security, bug fix, and enhancement update (MODERATE)
ubuntu
больше 11 лет назад
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.