curl-7.15.5-17.AXS3

エラータID: AXSA:2013-534:01

Release date: 
Monday, July 15, 2013 - 14:34
Subject: 
curl-7.15.5-17.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, FTP upload, HTTP post, and file transfer resume.

Security issues fixed with this release:

• CVE-2013-2174
No information available at the time of writing, please refer to the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2013-2174
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.


Additional Info: 

N/A

Download: 

SRPMS
  1. curl-7.15.5-17.AXS3.src.rpm
    MD5: 504f7f51e8b2f8636a76bb8873315c23
    SHA-256: 9f0a63e056adeac97f97cebbba24f415e79db8152f737673550f0b8d59319b2f
    Size: 1.51 MB

Asianux Server 3 for x86
  1. curl-7.15.5-17.AXS3.i386.rpm
    MD5: 7d358c25a2cbf5fb02992a6684ad4fe2
    SHA-256: 38190c9be01b9b59dded831ef5f4dbc486b5ec4a3b33fe507f008b7ff292521a
    Size: 269.54 kB
  2. curl-devel-7.15.5-17.AXS3.i386.rpm
    MD5: a62eaf03524c62d1a7562bb8e43c6c16
    SHA-256: a1304efac90392dd5d96b39f4e54dc5dc27a9048b32ab1293db6cfd742665af7
    Size: 312.52 kB

Asianux Server 3 for x86_64
  1. curl-7.15.5-17.AXS3.x86_64.rpm
    MD5: 6011b07df6069d97670319b1432b72f3
    SHA-256: 7d36e1641b043389ac9e9804c0e4ceded310597480c829c796ffe73216240e86
    Size: 267.20 kB
  2. curl-devel-7.15.5-17.AXS3.x86_64.rpm
    MD5: 655b91ee8451eb1aaf89575976ecc97c
    SHA-256: e8a1a95eba54895ec243c025b02115080b8d8b8796b41df423cc661e099d26c6
    Size: 321.01 kB