curl-7.19.7-53.AXS4

エラータID: AXSA:2017-1587:01

Release date: 
Wednesday, April 12, 2017 - 17:11
Subject: 
curl-7.19.7-53.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS,
DICT, TELNET and TFTP servers, using any of the supported protocols.
cURL is designed to work without user interaction or any kind of
interactivity. cURL offers many useful capabilities, like proxy support,
user authentication, FTP upload, HTTP post, and file transfer resume.

Security issues fixed with this release:

CVE-2017-2628
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update package.

CVEs: 
CVE-2017-2628
curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVE_GSSAPI define was meanwhile substituted by USE_HTTP_NEGOTIATE. This issue was introduced in RHEL 6.7 and affects RHEL 6 curl only.
Additional Info: 

N/A

Download: 

SRPMS
  1. curl-7.19.7-53.AXS4.src.rpm
    MD5: fed1cfb70b24ed5eeb4ecd9dd151a5cb
    SHA-256: 6c86a81af5d55270201a02c027e29b716e3b9a0c81f32b29c6feac4d5d287476
    Size: 2.07 MB

Asianux Server 4 for x86
  1. curl-7.19.7-53.AXS4.i686.rpm
    MD5: 54f3be62a3ff4bd1b888d481db8bd57a
    SHA-256: 59c25de839cc40de52856b3285ec171660a86765aa14e39d6ac07ab7a794354c
    Size: 196.91 kB
  2. libcurl-7.19.7-53.AXS4.i686.rpm
    MD5: 4c7dccbafddc5f6813d6e1d2162114fc
    SHA-256: 2c14e8ec314365fcd84485133ca88ef755c13b7019b6be2a66f083fb26bb2759
    Size: 175.82 kB
  3. libcurl-devel-7.19.7-53.AXS4.i686.rpm
    MD5: 4893fe6bdabd17107ce94d1acbf34308
    SHA-256: 7a24e3e6f092cea1f2f50ecca939e841e11c13b74a099af88ccf4b578a412633
    Size: 246.73 kB

Asianux Server 4 for x86_64
  1. curl-7.19.7-53.AXS4.x86_64.rpm
    MD5: 95ddac153c58a21882cf8b5e681aa9c3
    SHA-256: 10d58682962422e571cdad25084fcfba49052628a5012b29082ec22995923794
    Size: 196.51 kB
  2. libcurl-7.19.7-53.AXS4.x86_64.rpm
    MD5: b38032fb4d7bfb9829b908ac33895108
    SHA-256: e42872824b4e47b2bf41f19beb029b8eb6080b3a42d84974eaccf57b7b12d3c0
    Size: 168.46 kB
  3. libcurl-devel-7.19.7-53.AXS4.x86_64.rpm
    MD5: 4470a8accf6f1f4ea3834bd428f11603
    SHA-256: 86bc519bfa4548757fe8314da6755dc1fdbbe1c2b6d2676c357343791f20e0f4
    Size: 246.29 kB
  4. libcurl-7.19.7-53.AXS4.i686.rpm
    MD5: 4c7dccbafddc5f6813d6e1d2162114fc
    SHA-256: 2c14e8ec314365fcd84485133ca88ef755c13b7019b6be2a66f083fb26bb2759
    Size: 175.82 kB
  5. libcurl-devel-7.19.7-53.AXS4.i686.rpm
    MD5: 4893fe6bdabd17107ce94d1acbf34308
    SHA-256: 7a24e3e6f092cea1f2f50ecca939e841e11c13b74a099af88ccf4b578a412633
    Size: 246.73 kB