curl-7.15.5-2.1AXS3.4
エラータID: AXSA:2009-37:01
cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, FTP upload, HTTP post, and file transfer resume.
Fixed bugs:
CVE-2009-0037
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
Update packages.
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
N/A
SRPMS
- curl-7.15.5-2.1AXS3.4.src.rpm
MD5: e9fe941215ee601834459dc2e3760d55
SHA-256: dcb163e7bb2bfa4ad0d48970253a16ab6fc56486d82575d6a512d3a375edab86
Size: 1.49 MB
Asianux Server 3 for x86
- curl-7.15.5-2.1AXS3.4.i386.rpm
MD5: 3cbad72399d6de6322bf6e840ea01590
SHA-256: e2adadef979020ccf19d474352be0043e7353bb5f8504725473b05116a09d101
Size: 265.91 kB - curl-devel-7.15.5-2.1AXS3.4.i386.rpm
MD5: d3005ba978b92548821d1db17323459b
SHA-256: 4a08e48b9bfc741fe6ec0bef0a11a3595e9933928fe18c154ba8ae9908b596c8
Size: 311.78 kB
Asianux Server 3 for x86_64
- curl-7.15.5-2.1AXS3.4.x86_64.rpm
MD5: f67ec4f30be45260cdebdd4ede8da491
SHA-256: bd0401990d6fecf376cc17e8d1cb5907f23b727b5cfa39a394d2c05ab42cc8a9
Size: 262.62 kB - curl-devel-7.15.5-2.1AXS3.4.x86_64.rpm
MD5: b98788312186909a25bf069720ac6791
SHA-256: 38b84133ef7e0bd73ae1256677ea43bb5460bec660d92518a2d56ff157253151
Size: 319.62 kB