curl-7.61.1-14.el8

エラータID: AXSA:2021-1144:01

Release date: 
Wednesday, January 13, 2021 - 13:10
Subject: 
curl-7.61.1-14.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: Incorrect argument check can allow remote servers to overwrite local files (CVE-2020-8177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 8.3 Release Notes linked from the References section.

CVE-2020-8177
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2020-8177
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
Additional Info: 

N/A

Download: 

SRPMS
  1. curl-7.61.1-14.el8.src.rpm
    MD5: e1c79a4ae69b934cc5231b45e8095556
    SHA-256: c5d8a98c2ea6e714c50392abc7e02eaa5392aac6bc1aa19e2b58082d934b78d5
    Size: 2.37 MB

Asianux Server 8 for x86_64
  1. curl-7.61.1-14.el8.x86_64.rpm
    MD5: 8b0c300fee9bd8695deb5dfb1e682535
    SHA-256: 5662220fbacb96b5192500b68afc39578ab8897f30718c219f679655bac07093
    Size: 351.43 kB
  2. libcurl-7.61.1-14.el8.x86_64.rpm
    MD5: a01932fc086cb12be2504011c9b7cadc
    SHA-256: 1a42cce9e6c80a5cc30fadcd4b9b3fe705f5b782c92e501c23297a555b12efee
    Size: 297.30 kB
  3. libcurl-devel-7.61.1-14.el8.x86_64.rpm
    MD5: 5011679c4cc05bb46d47a9edfb4aefc8
    SHA-256: e210370526827102a6ecbad02ce2c5af9c87dd54710b444a27f34e35a91714e9
    Size: 830.52 kB
  4. libcurl-minimal-7.61.1-14.el8.x86_64.rpm
    MD5: a7f89f8817b84f8bcb81ac89ba274bce
    SHA-256: 3bc5076fa0ec3bb107eba89fbd0892f3f61515a5d12c4599d1ba89254e86a74a
    Size: 283.92 kB
  5. libcurl-7.61.1-14.el8.i686.rpm
    MD5: 82ffc4ea874a378a9715849d8db3b714
    SHA-256: d7d34413eb9921db0eacfe1885087f42f502639a9326130cb73178a139251e77
    Size: 325.23 kB
  6. libcurl-devel-7.61.1-14.el8.i686.rpm
    MD5: 8179c4aa6c01811284f1ed4f5ebd5e85
    SHA-256: 4249ba3634f08de28a5fcb6af60d7bd085620aa24bd0b16ee783acc67ddd94dc
    Size: 830.57 kB
  7. libcurl-minimal-7.61.1-14.el8.i686.rpm
    MD5: 6d43d75f95252e797dd2af60606e5863
    SHA-256: ed4f9bf97d0dfa3a6b1c21574a097e7361c4b2e8e47766e220fea2a7afcf7557
    Size: 310.71 kB