curl-7.19.7-37.AXS4

エラータID: AXSA:2013-506:03

Release date: 
Friday, June 28, 2013 - 19:55
Subject: 
curl-7.19.7-37.AXS4
Affected Channels: 
Asianux Server 4 for ppc
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, FTP upload, HTTP post, and file transfer resume.

Security issues fixed with this release:

• CVE-2013-2174
No description available at the time of writing, please check the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2013-2174
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.


Additional Info: 

N/A

Download: 

SRPMS
  1. curl-7.19.7-37.AXS4.src.rpm
    MD5: 74ad40a540907b5cd8b667cafacfa18a
    SHA-256: e2abea166d5f9cdcb67ac008ab3fac12183d502c1edc4e095d47adaf07958985
    Size: 2.00 MB

Asianux Server 4 for x86
  1. curl-7.19.7-37.AXS4.i686.rpm
    MD5: 8285fc4b2f6a3fa2c2ac62e9e4872c08
    SHA-256: b9bce9e5383639632c2b8e0c239c2f02031dabd999ea4c0ca530139b33a3e6ea
    Size: 192.84 kB
  2. libcurl-7.19.7-37.AXS4.i686.rpm
    MD5: 0d14884194fec2a0415c16d4eea3abc5
    SHA-256: 31a22d9cd7b5c449a013c0a0e2dce32054c7f208131a90fe1169d4e205f0db64
    Size: 170.63 kB
  3. libcurl-devel-7.19.7-37.AXS4.i686.rpm
    MD5: 4db4dab6a48770296d8031738e72a06a
    SHA-256: 6ca848ac7a6de8fcb535b66a836338b88fa1de15a6dfe07d6d93bcbd511f81be
    Size: 243.46 kB

Asianux Server 4 for x86_64
  1. curl-7.19.7-37.AXS4.x86_64.rpm
    MD5: f1f22e6f5a59c13409010a80e2cdee4d
    SHA-256: 6f33703a28114d68d8866f9f84371d7a2c201442d085cf4e867dfd6190794798
    Size: 192.53 kB
  2. libcurl-7.19.7-37.AXS4.x86_64.rpm
    MD5: c14bf43b37773ad4076b875bcc97f8d4
    SHA-256: 935b9eb2e37e5ed15bba8ca42e003e687b8d2b4270dc309599b76e2839e5ba74
    Size: 163.60 kB
  3. libcurl-devel-7.19.7-37.AXS4.x86_64.rpm
    MD5: 0e5cedbce1e3feee51a26849ae291408
    SHA-256: b609c11977f8f2fe71c3776a9bf2bc40373e3754c3d2ccc75e12cd835cf885ba
    Size: 243.01 kB
  4. libcurl-7.19.7-37.AXS4.i686.rpm
    MD5: 0d14884194fec2a0415c16d4eea3abc5
    SHA-256: 31a22d9cd7b5c449a013c0a0e2dce32054c7f208131a90fe1169d4e205f0db64
    Size: 170.63 kB
  5. libcurl-devel-7.19.7-37.AXS4.i686.rpm
    MD5: 4db4dab6a48770296d8031738e72a06a
    SHA-256: 6ca848ac7a6de8fcb535b66a836338b88fa1de15a6dfe07d6d93bcbd511f81be
    Size: 243.46 kB