curl-7.19.7-36.AXS4

エラータID: AXSA:2013-429:02

Release date: 
Friday, May 3, 2013 - 15:22
Subject: 
curl-7.19.7-36.AXS4
Affected Channels: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, FTP upload, HTTP post, and file transfer resume.

Security issues fixed with this release:

• CVE-2013-1944
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Solution: 

Update packages.

CVEs: 
CVE-2013-1944
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.


Additional Info: 

N/A

Download: 

SRPMS
  1. curl-7.19.7-36.AXS4.src.rpm
    MD5: 23b357e0b91b47f3cd415fb14b60d452
    SHA-256: aeb655f06285595dbb1561bcc9001ed60675393d343b055cdb6c92328194e782
    Size: 2.00 MB

Asianux Server 4 for x86
  1. curl-7.19.7-36.AXS4.i686.rpm
    MD5: 323ce5d6427c8bc5324f7c192a9f14bd
    SHA-256: 66fe9b4ada8daa1f51cc2d0d193fa2ed77756b8c24f7ee3e37f4d047339ec4a1
    Size: 192.73 kB
  2. libcurl-7.19.7-36.AXS4.i686.rpm
    MD5: b204cfb0345ea6c7b41ab87ac1d11127
    SHA-256: 84b028b13504674ac4d0322caad34ec56dec7080b3f683f5bf7b87e7e9ee4e11
    Size: 170.55 kB
  3. libcurl-devel-7.19.7-36.AXS4.i686.rpm
    MD5: 5b68effc1740d6ad7675a01d6659ec47
    SHA-256: e30c06f9e9621d010fa65b2f98f0dc1d651ac238413c3949adcddf968b149c15
    Size: 243.31 kB

Asianux Server 4 for x86_64
  1. curl-7.19.7-36.AXS4.x86_64.rpm
    MD5: 41f70c1dbc06b23a8edabab329b6c16b
    SHA-256: 539814d9eeb3490e8ee5b5eccfcbf0e5c26eca75b1d21a7d3e5678ec63c5b89b
    Size: 192.41 kB
  2. libcurl-7.19.7-36.AXS4.x86_64.rpm
    MD5: 10eccf13a99da0447da2a88f2a7d22e3
    SHA-256: d8e1c78646d0a62d7d1c6ee66b331cded9302a82fca675395f32eb6eecb5b570
    Size: 163.43 kB
  3. libcurl-devel-7.19.7-36.AXS4.x86_64.rpm
    MD5: 57d923924cfd38c44ee43a77a169efba
    SHA-256: 1d7630a7e68b56296f7c2484674b8bfb6fe99fe7b2cac2f3f1268d6313fb58a4
    Size: 242.89 kB
  4. libcurl-7.19.7-36.AXS4.i686.rpm
    MD5: b204cfb0345ea6c7b41ab87ac1d11127
    SHA-256: 84b028b13504674ac4d0322caad34ec56dec7080b3f683f5bf7b87e7e9ee4e11
    Size: 170.55 kB
  5. libcurl-devel-7.19.7-36.AXS4.i686.rpm
    MD5: 5b68effc1740d6ad7675a01d6659ec47
    SHA-256: e30c06f9e9621d010fa65b2f98f0dc1d651ac238413c3949adcddf968b149c15
    Size: 243.31 kB