Описание
ELSA-2021-1610: curl security and bug fix update (MODERATE)
[7.61.1-18]
- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)
[7.61.1-17]
- validate an ssl connection using an intermediate certificate (#1895355)
[7.61.1-16]
- fix multiarch conflicts in libcurl-minimal (#1895391)
[7.61.1-15]
- do not crash when HTTPS_PROXY and NO_PROXY are used together (#1873327)
- libcurl: wrong connect-only connection (CVE-2020-8231)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
curl
7.61.1-18.el8
libcurl
7.61.1-18.el8
libcurl-devel
7.61.1-18.el8
libcurl-minimal
7.61.1-18.el8
Oracle Linux x86_64
curl
7.61.1-18.el8
libcurl
7.61.1-18.el8
libcurl-devel
7.61.1-18.el8
libcurl-minimal
7.61.1-18.el8