Updated curl packages available.

Advisory:	RHBA-2000:092-03
Type:	Bug Fix Advisory
Severity:	N/A
Issued on:	2000-11-06
Last updated on:	2000-11-06
Affected Products:	Red Hat Linux 6.2 Red Hat Linux 7.0
OVAL:	N/A

Details

Updated curl packages are available for Red Hat Power Tools 6.x and 7.

A bug in some versions of curl would cause it to incorrectly parse
error responses from FTP servers. A malicious FTP server could use
this bug to crash its client.

The packages listed in the previous errata (RHBA-2000:092-01) should not be

used since the "-c" option does not function properly. Please use the

packages listed in this updated errata instead.

Solution

For each RPM for your particular architecture, run:
rpm -Fvh [filename]
where filename is the name of the RPM.

Updated packages

Red Hat Linux 6.2

alpha:
ftp://updates.redhat.com/6.2/alpha/curl-7.4.1-1.6.x.alpha.rpm Missing file	`ddab1e477ba009284e6128b2ad555961`
ftp://updates.redhat.com/6.2/alpha/curl-devel-7.4.1-1.6.x.alpha.rpm Missing file	`4b55c56f68784e575bf045b27ecaad05`

i386:
ftp://updates.redhat.com/6.2/i386/curl-7.4.1-1.6.x.i386.rpm Missing file	`bcf89966984970fcc958943842690452`
ftp://updates.redhat.com/6.2/i386/curl-devel-7.4.1-1.6.x.i386.rpm Missing file	`4d0c3756e007b81cfe397a4ff60b9419`

sparc:
ftp://updates.redhat.com/6.2/sparc/curl-7.4.1-1.6.x.sparc.rpm Missing file	`80bdadc359aa9f76d5d4bddc257809bb`
ftp://updates.redhat.com/6.2/sparc/curl-devel-7.4.1-1.6.x.sparc.rpm Missing file	`67fc0b4c45caa6700184c41fb227e7e1`

Red Hat Linux 7.0

i386:
ftp://updates.redhat.com/7.0/i386/curl-7.4.1-1.i386.rpm Missing file	`2505ed67c1698078c131cda57e7dffd8`
ftp://updates.redhat.com/7.0/i386/curl-devel-7.4.1-1.i386.rpm Missing file	`83dccfb76b2701599cb428f93442b78c`

Bugs fixed (see bugzilla for more information)

20337 - -c with FTP is broken in curl 7.3

References

http://www.securityfocus.com/bid/1804
http://sourceforge.net/bugs/?func=detailbug=116688=976

Thanks to mschwendt@web.de for reporting bug #20337

Keywords

N/A

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/