curl-7.15.5-16.AXS3

エラータID: AXSA:2013-417:02

Release date: 
Friday, April 26, 2013 - 13:22
Subject: 
curl-7.15.5-16.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, FTP upload, HTTP post, and file transfer resume.

Security issues fixed with this release:

• CVE-2013-1944
No description available at the time of writing, please use the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2013-1944
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.


Additional Info: 

N/A

Download: 

SRPMS
  1. curl-7.15.5-16.AXS3.src.rpm
    MD5: 885c1e469eb1880126accbbb711f6520
    SHA-256: 5d1fec40d720ef17236ecd0126297544ca360e2c2256f04285712c48a773c9cd
    Size: 1.51 MB

Asianux Server 3 for x86
  1. curl-7.15.5-16.AXS3.i386.rpm
    MD5: 43dfeece73053b473f14d8ee5f80f81f
    SHA-256: 55fedf40d8ef14d4d8d623109f0c05c64cd3396aa0093e49050781712d34d1e1
    Size: 269.36 kB
  2. curl-devel-7.15.5-16.AXS3.i386.rpm
    MD5: 6746ee20b86fedbfcebea6a0c46e7bae
    SHA-256: b3fddcbf2b38b21943a487f93a626f374ede629319c76ad4a8f1fda0b6d827cc
    Size: 312.35 kB

Asianux Server 3 for x86_64
  1. curl-7.15.5-16.AXS3.x86_64.rpm
    MD5: d6bd5f0ef7b75fee18e7fca8c2d6b9e5
    SHA-256: ace18765096e29f36df896d11a6a5d6d1c89d9ad4bae72af0ee9f36affed1f34
    Size: 266.92 kB
  2. curl-devel-7.15.5-16.AXS3.x86_64.rpm
    MD5: 6ccf1000b613ffb6d4a87fdd5ac2f817
    SHA-256: bbf69ecb4c0ff22940130c0726a4d3dabbd36400244d2cf69f2bd0fb7ae3eed6
    Size: 320.51 kB