Skip to navigation

Security Advisory Moderate: curl security update

Advisory: RHSA-2013:0983-1
Type: Security Advisory
Severity: Moderate
Issued on: 2013-06-25
Last updated on: 2013-06-25
Affected Products: RHEL Desktop Workstation (v. 5 client)
Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux Desktop (v. 5 client)
Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux EUS (v. 5.9.z server)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Long Life (v. 5.9 server)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Server AUS (v. 6.4)
Red Hat Enterprise Linux Server EUS (v. 6.4.z)
Red Hat Enterprise Linux Workstation (v. 6)
CVEs (cve.mitre.org): CVE-2013-2174

Details

Updated curl packages that fix one security issue are now available for
Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

cURL provides the libcurl library and a command line tool for downloading
files from servers using various protocols, including HTTP, FTP, and LDAP.

A heap-based buffer overflow flaw was found in the way libcurl unescaped
URLs. A remote attacker could provide a specially-crafted URL that, when
processed by an application using libcurl that handles untrusted URLs,
would possibly cause it to crash or, potentially, execute arbitrary code.
(CVE-2013-2174)

Red Hat would like to thank the cURL project for reporting this issue.
Upstream acknowledges Timo Sirainen as the original reporter.

Users of curl should upgrade to these updated packages, which contain a
backported patch to correct this issue. All running applications using
libcurl must be restarted for the update to take effect.


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Updated packages

RHEL Desktop Workstation (v. 5 client)

SRPMS:
curl-7.15.5-17.el5_9.src.rpm     MD5: 070faffbe42805b8e5b32fd6d6dbf906
SHA-256: e49c9e8b3d96407707d97ccb7bc1f775b86244e250b05a03471f8ccb4d2cb99e
 
IA-32:
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
 
x86_64:
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-debuginfo-7.15.5-17.el5_9.x86_64.rpm     MD5: f30bdbd2562ae4bc2c275d845364569d
SHA-256: fe7defbdc98ca4289e852a0ce175bb469f7ea0e759724fcd06a18f2fd2099f1f
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
curl-devel-7.15.5-17.el5_9.x86_64.rpm     MD5: 88cebb69a47347d75769060b3ecbcdc1
SHA-256: 5bdc3177cf7356ef60d926fdf0414c9d52bd877ee44ac172727a20949567312e
 
Red Hat Enterprise Linux (v. 5 server)

SRPMS:
curl-7.15.5-17.el5_9.src.rpm     MD5: 070faffbe42805b8e5b32fd6d6dbf906
SHA-256: e49c9e8b3d96407707d97ccb7bc1f775b86244e250b05a03471f8ccb4d2cb99e
 
IA-32:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
 
IA-64:
curl-7.15.5-17.el5_9.ia64.rpm     MD5: 16ffc95d5cd3b17ba729f718aeec9e9b
SHA-256: 65c2df8eed4c58ded87249f32ca60c90e9ce9c87990ecfd92dd47261fae23bed
curl-debuginfo-7.15.5-17.el5_9.ia64.rpm     MD5: 4713af125f8134753e026e306f844e92
SHA-256: b1e3e2f1b87a7b7085896e75c18b7470f135a9153a3a7a1634411d4656b94d00
curl-devel-7.15.5-17.el5_9.ia64.rpm     MD5: 3a86e1674d58bb77ce0de2ab1cef8896
SHA-256: 0635f58498bbde20752b26abffea554dc109e0a42093bb7d22b417a29e95772e
 
PPC:
curl-7.15.5-17.el5_9.ppc.rpm     MD5: b169efd42b60d18ba347697679daa0d9
SHA-256: 96507b7cd8c8fadb9818bc0f7a0875d9d9c2a7c16bb1b89c7dfb0727c9af8acd
curl-7.15.5-17.el5_9.ppc64.rpm     MD5: 746795ef407ff933cbd2b04947462afb
SHA-256: 07267bc8244bc923b604d2734e42381ab52bc99b1f423d080ccb4a5ab57fe4a0
curl-debuginfo-7.15.5-17.el5_9.ppc.rpm     MD5: 0c80a764ccb3e635e225d0006ee1ef4c
SHA-256: 0b03791b8cc6e8f9abae3660b52381b36b3c37b165be6cfc08857b5e210fe41d
curl-debuginfo-7.15.5-17.el5_9.ppc64.rpm     MD5: caadd815a6ffc7a5d2cd4dd314ec8ff0
SHA-256: d496978897395d229fe43d9a3a2be489e33d142a79be75c0c2be2b60822b323b
curl-devel-7.15.5-17.el5_9.ppc.rpm     MD5: da4c464367d346c64fe4f9aa1968b5f5
SHA-256: 0bc46c631da7338e9330c7d27d3b796216461f624a840e733f675d6cfdb93465
curl-devel-7.15.5-17.el5_9.ppc64.rpm     MD5: 68a32f6ad0c9657c4b57f75db14f4c49
SHA-256: fd14f8068ccb31488da66db145b355c5d6ab1e7238379b9545fbab41f6432988
 
s390x:
curl-7.15.5-17.el5_9.s390.rpm     MD5: fb3e075fa3ced8dbe24a77aa6a4ab266
SHA-256: 07880f4ee6ffbe46e93985bcea02b110b9fd7b214a9c61c185546eed4838aa4f
curl-7.15.5-17.el5_9.s390x.rpm     MD5: 9aeb7970196324fc2bd19bb773c03b0f
SHA-256: 2c7e3d833be91fc6ac1bd72af58ccf641bf7051833df64a9b9b701726ace0cc9
curl-debuginfo-7.15.5-17.el5_9.s390.rpm     MD5: 0054057d4b84e71c261c492dd7f02471
SHA-256: fb788ff9aedd34a42aa6853aa6eb1992cad7a941926569659344f09884d477f0
curl-debuginfo-7.15.5-17.el5_9.s390x.rpm     MD5: 8c059e486a001c4a1380bf5da40a4c2d
SHA-256: 41dcefee2b111e6d94b72d10de231a5d324aa14e6eb07b9e5eb3c11b90841d00
curl-devel-7.15.5-17.el5_9.s390.rpm     MD5: 9c282367015386c51b4d5bf88d8c3eb5
SHA-256: 72d7bee95b611585b2b4fb948ee62db9a3389c6d11a06f9a3b38e4559bdd7179
curl-devel-7.15.5-17.el5_9.s390x.rpm     MD5: f7c30523234b73fe0af30a418dbf69f0
SHA-256: 11fcbc8aab2b8e809f6532c247ad30cb98833759c4f0ee3e740dc33ecefdf6d4
 
x86_64:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-7.15.5-17.el5_9.x86_64.rpm     MD5: 21832405737afe6e15ee27fdcf16575f
SHA-256: e9f061510d8f655bd97d0e1d3c2bd4513a4237f97cae0cab4b70f468f3e8ef80
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-debuginfo-7.15.5-17.el5_9.x86_64.rpm     MD5: f30bdbd2562ae4bc2c275d845364569d
SHA-256: fe7defbdc98ca4289e852a0ce175bb469f7ea0e759724fcd06a18f2fd2099f1f
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
curl-devel-7.15.5-17.el5_9.x86_64.rpm     MD5: 88cebb69a47347d75769060b3ecbcdc1
SHA-256: 5bdc3177cf7356ef60d926fdf0414c9d52bd877ee44ac172727a20949567312e
 
Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
curl-7.15.5-17.el5_9.src.rpm     MD5: 070faffbe42805b8e5b32fd6d6dbf906
SHA-256: e49c9e8b3d96407707d97ccb7bc1f775b86244e250b05a03471f8ccb4d2cb99e
 
IA-32:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
 
x86_64:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-7.15.5-17.el5_9.x86_64.rpm     MD5: 21832405737afe6e15ee27fdcf16575f
SHA-256: e9f061510d8f655bd97d0e1d3c2bd4513a4237f97cae0cab4b70f468f3e8ef80
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-debuginfo-7.15.5-17.el5_9.x86_64.rpm     MD5: f30bdbd2562ae4bc2c275d845364569d
SHA-256: fe7defbdc98ca4289e852a0ce175bb469f7ea0e759724fcd06a18f2fd2099f1f
 
Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
curl-7.19.7-37.el6_4.src.rpm     MD5: fa63b075c72f29f7a1603a149fd1375f
SHA-256: 4ac7b9a5b006d2dca3e71cdda959e571c96032b5c59dc0335ee30c74a25d2ee4
 
IA-32:
curl-7.19.7-37.el6_4.i686.rpm     MD5: d241a01e6651f15927422c44b3597186
SHA-256: 81d39709a919445e42517a069d89f09fb2ec761705e4fc05ff956d0665524af8
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
 
x86_64:
curl-7.19.7-37.el6_4.x86_64.rpm     MD5: 938e076c12d1a42c9003c87892f02ad3
SHA-256: aa635ea5a77b8b38d2db0fe001e4864f15fc27f70bf3f13a995601d0f117ee1b
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
curl-debuginfo-7.19.7-37.el6_4.x86_64.rpm     MD5: 84cf6995c8e891913c1997f99a6b8763
SHA-256: e879ccf6145a35641a26fe992b5925ab599eca3957ab3b1042d6b329ff7f96e1
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-7.19.7-37.el6_4.x86_64.rpm     MD5: 5fa4f4cae3d406e50ed554e521f1c5c2
SHA-256: 03ba87f8a8fb02479ddf055a51ae8702df2bba7cac3369b37e62eef84b4bdba4
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
libcurl-devel-7.19.7-37.el6_4.x86_64.rpm     MD5: f55ec6c07a4f2d8608b73f69803b4d62
SHA-256: 1da279525a27792d513ac3471ec8754a7216550b388830c97ffdaa0843031cf4
 
Red Hat Enterprise Linux EUS (v. 5.9.z server)

SRPMS:
curl-7.15.5-17.el5_9.src.rpm     MD5: 070faffbe42805b8e5b32fd6d6dbf906
SHA-256: e49c9e8b3d96407707d97ccb7bc1f775b86244e250b05a03471f8ccb4d2cb99e
 
IA-32:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
 
IA-64:
curl-7.15.5-17.el5_9.ia64.rpm     MD5: 16ffc95d5cd3b17ba729f718aeec9e9b
SHA-256: 65c2df8eed4c58ded87249f32ca60c90e9ce9c87990ecfd92dd47261fae23bed
curl-debuginfo-7.15.5-17.el5_9.ia64.rpm     MD5: 4713af125f8134753e026e306f844e92
SHA-256: b1e3e2f1b87a7b7085896e75c18b7470f135a9153a3a7a1634411d4656b94d00
curl-devel-7.15.5-17.el5_9.ia64.rpm     MD5: 3a86e1674d58bb77ce0de2ab1cef8896
SHA-256: 0635f58498bbde20752b26abffea554dc109e0a42093bb7d22b417a29e95772e
 
PPC:
curl-7.15.5-17.el5_9.ppc.rpm     MD5: b169efd42b60d18ba347697679daa0d9
SHA-256: 96507b7cd8c8fadb9818bc0f7a0875d9d9c2a7c16bb1b89c7dfb0727c9af8acd
curl-7.15.5-17.el5_9.ppc64.rpm     MD5: 746795ef407ff933cbd2b04947462afb
SHA-256: 07267bc8244bc923b604d2734e42381ab52bc99b1f423d080ccb4a5ab57fe4a0
curl-debuginfo-7.15.5-17.el5_9.ppc.rpm     MD5: 0c80a764ccb3e635e225d0006ee1ef4c
SHA-256: 0b03791b8cc6e8f9abae3660b52381b36b3c37b165be6cfc08857b5e210fe41d
curl-debuginfo-7.15.5-17.el5_9.ppc64.rpm     MD5: caadd815a6ffc7a5d2cd4dd314ec8ff0
SHA-256: d496978897395d229fe43d9a3a2be489e33d142a79be75c0c2be2b60822b323b
curl-devel-7.15.5-17.el5_9.ppc.rpm     MD5: da4c464367d346c64fe4f9aa1968b5f5
SHA-256: 0bc46c631da7338e9330c7d27d3b796216461f624a840e733f675d6cfdb93465
curl-devel-7.15.5-17.el5_9.ppc64.rpm     MD5: 68a32f6ad0c9657c4b57f75db14f4c49
SHA-256: fd14f8068ccb31488da66db145b355c5d6ab1e7238379b9545fbab41f6432988
 
s390x:
curl-7.15.5-17.el5_9.s390.rpm     MD5: fb3e075fa3ced8dbe24a77aa6a4ab266
SHA-256: 07880f4ee6ffbe46e93985bcea02b110b9fd7b214a9c61c185546eed4838aa4f
curl-7.15.5-17.el5_9.s390x.rpm     MD5: 9aeb7970196324fc2bd19bb773c03b0f
SHA-256: 2c7e3d833be91fc6ac1bd72af58ccf641bf7051833df64a9b9b701726ace0cc9
curl-debuginfo-7.15.5-17.el5_9.s390.rpm     MD5: 0054057d4b84e71c261c492dd7f02471
SHA-256: fb788ff9aedd34a42aa6853aa6eb1992cad7a941926569659344f09884d477f0
curl-debuginfo-7.15.5-17.el5_9.s390x.rpm     MD5: 8c059e486a001c4a1380bf5da40a4c2d
SHA-256: 41dcefee2b111e6d94b72d10de231a5d324aa14e6eb07b9e5eb3c11b90841d00
curl-devel-7.15.5-17.el5_9.s390.rpm     MD5: 9c282367015386c51b4d5bf88d8c3eb5
SHA-256: 72d7bee95b611585b2b4fb948ee62db9a3389c6d11a06f9a3b38e4559bdd7179
curl-devel-7.15.5-17.el5_9.s390x.rpm     MD5: f7c30523234b73fe0af30a418dbf69f0
SHA-256: 11fcbc8aab2b8e809f6532c247ad30cb98833759c4f0ee3e740dc33ecefdf6d4
 
x86_64:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-7.15.5-17.el5_9.x86_64.rpm     MD5: 21832405737afe6e15ee27fdcf16575f
SHA-256: e9f061510d8f655bd97d0e1d3c2bd4513a4237f97cae0cab4b70f468f3e8ef80
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-debuginfo-7.15.5-17.el5_9.x86_64.rpm     MD5: f30bdbd2562ae4bc2c275d845364569d
SHA-256: fe7defbdc98ca4289e852a0ce175bb469f7ea0e759724fcd06a18f2fd2099f1f
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
curl-devel-7.15.5-17.el5_9.x86_64.rpm     MD5: 88cebb69a47347d75769060b3ecbcdc1
SHA-256: 5bdc3177cf7356ef60d926fdf0414c9d52bd877ee44ac172727a20949567312e
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
curl-7.19.7-37.el6_4.src.rpm     MD5: fa63b075c72f29f7a1603a149fd1375f
SHA-256: 4ac7b9a5b006d2dca3e71cdda959e571c96032b5c59dc0335ee30c74a25d2ee4
 
x86_64:
curl-7.19.7-37.el6_4.x86_64.rpm     MD5: 938e076c12d1a42c9003c87892f02ad3
SHA-256: aa635ea5a77b8b38d2db0fe001e4864f15fc27f70bf3f13a995601d0f117ee1b
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
curl-debuginfo-7.19.7-37.el6_4.x86_64.rpm     MD5: 84cf6995c8e891913c1997f99a6b8763
SHA-256: e879ccf6145a35641a26fe992b5925ab599eca3957ab3b1042d6b329ff7f96e1
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-7.19.7-37.el6_4.x86_64.rpm     MD5: 5fa4f4cae3d406e50ed554e521f1c5c2
SHA-256: 03ba87f8a8fb02479ddf055a51ae8702df2bba7cac3369b37e62eef84b4bdba4
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
libcurl-devel-7.19.7-37.el6_4.x86_64.rpm     MD5: f55ec6c07a4f2d8608b73f69803b4d62
SHA-256: 1da279525a27792d513ac3471ec8754a7216550b388830c97ffdaa0843031cf4
 
Red Hat Enterprise Linux Long Life (v. 5.9 server)

SRPMS:
curl-7.15.5-17.el5_9.src.rpm     MD5: 070faffbe42805b8e5b32fd6d6dbf906
SHA-256: e49c9e8b3d96407707d97ccb7bc1f775b86244e250b05a03471f8ccb4d2cb99e
 
IA-32:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
 
IA-64:
curl-7.15.5-17.el5_9.ia64.rpm     MD5: 16ffc95d5cd3b17ba729f718aeec9e9b
SHA-256: 65c2df8eed4c58ded87249f32ca60c90e9ce9c87990ecfd92dd47261fae23bed
curl-debuginfo-7.15.5-17.el5_9.ia64.rpm     MD5: 4713af125f8134753e026e306f844e92
SHA-256: b1e3e2f1b87a7b7085896e75c18b7470f135a9153a3a7a1634411d4656b94d00
curl-devel-7.15.5-17.el5_9.ia64.rpm     MD5: 3a86e1674d58bb77ce0de2ab1cef8896
SHA-256: 0635f58498bbde20752b26abffea554dc109e0a42093bb7d22b417a29e95772e
 
x86_64:
curl-7.15.5-17.el5_9.i386.rpm     MD5: e111b0949a5dde3b8ca5f86e8ad1ea30
SHA-256: 667332bc523d50046c3b618c9b92f5002ae0caaeb56d8eeebe27ebc85d44bf10
curl-7.15.5-17.el5_9.x86_64.rpm     MD5: 21832405737afe6e15ee27fdcf16575f
SHA-256: e9f061510d8f655bd97d0e1d3c2bd4513a4237f97cae0cab4b70f468f3e8ef80
curl-debuginfo-7.15.5-17.el5_9.i386.rpm     MD5: 85eb1364afeba0a26dabc11de13ac17b
SHA-256: 5bc69fd7e87bedb1376332dd4c7c85733eb785632faf41c64910f5f688ee5709
curl-debuginfo-7.15.5-17.el5_9.x86_64.rpm     MD5: f30bdbd2562ae4bc2c275d845364569d
SHA-256: fe7defbdc98ca4289e852a0ce175bb469f7ea0e759724fcd06a18f2fd2099f1f
curl-devel-7.15.5-17.el5_9.i386.rpm     MD5: b3029585ab18b2919c13afb1534fda63
SHA-256: bb7722ba73cc25682a19b5fc13523006b242192cb55984c4e36e67f7f2dc292e
curl-devel-7.15.5-17.el5_9.x86_64.rpm     MD5: 88cebb69a47347d75769060b3ecbcdc1
SHA-256: 5bdc3177cf7356ef60d926fdf0414c9d52bd877ee44ac172727a20949567312e
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
curl-7.19.7-37.el6_4.src.rpm     MD5: fa63b075c72f29f7a1603a149fd1375f
SHA-256: 4ac7b9a5b006d2dca3e71cdda959e571c96032b5c59dc0335ee30c74a25d2ee4
 
IA-32:
curl-7.19.7-37.el6_4.i686.rpm     MD5: d241a01e6651f15927422c44b3597186
SHA-256: 81d39709a919445e42517a069d89f09fb2ec761705e4fc05ff956d0665524af8
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
 
PPC:
curl-7.19.7-37.el6_4.ppc64.rpm     MD5: e32e5369e59158d3582e75aa2c50d268
SHA-256: 18d1431fda9c32d80fc1f8738abfaa45e9daa3d63a6080a50a35e6f1a898e282
curl-debuginfo-7.19.7-37.el6_4.ppc.rpm     MD5: 5a057fd3e701b2f33bbedd020a15b57c
SHA-256: 7b0223c16d49da6c5ed6b33ac3a8c7e2b1161a902ae9c04da6d35be87bfd1beb
curl-debuginfo-7.19.7-37.el6_4.ppc64.rpm     MD5: 2d782e0b880e9579da2132059755ce2b
SHA-256: 58af9d4fe905f1f37b7e9d276fcbdacd1f0f97959e5a04f90c1d665b0085b138
libcurl-7.19.7-37.el6_4.ppc.rpm     MD5: 635b4dc150b5f1e31bbb62c65bc982c5
SHA-256: 0acb6a06d7c093b185c51963bcf1fe3527a740acf8cdb35dbe5f2c2b47cc0229
libcurl-7.19.7-37.el6_4.ppc64.rpm     MD5: e5ffc49655d256b43ba20c9a74b250a3
SHA-256: c42488bbf7bf18d14ca8b9e044b1e0e1995863f051df058dc5207bb5d39f473f
libcurl-devel-7.19.7-37.el6_4.ppc.rpm     MD5: 3f15c53627a3a024e0a00e9aac20b71c
SHA-256: ab2912991dd4f6f49fd033a4e3b508456bda7b3fadc14a540b1c40438b8b245d
libcurl-devel-7.19.7-37.el6_4.ppc64.rpm     MD5: 5eaf3010791edfcb32ff65e9c861fb11
SHA-256: 2e54050df63a624aa99e43f7fd029c0f66463efaafdde830526e2a5f921c2acf
 
s390x:
curl-7.19.7-37.el6_4.s390x.rpm     MD5: 36713ff9d5598e845454477e33c7dda0
SHA-256: 3345953bd384e6e9f0f87c9eb23f6a9bae19e2fc463d4084d5e6f8154f7e3c4c
curl-debuginfo-7.19.7-37.el6_4.s390.rpm     MD5: 9ea974b4533c77843b8f653a8713a685
SHA-256: 6b9148f71fa3e5735830a7068c39084a895a95ac80209ce4e46203f25b2ca477
curl-debuginfo-7.19.7-37.el6_4.s390x.rpm     MD5: 9e63f3f86552d88da51eeb837f8bcfa6
SHA-256: 66c322730295f5b31d8b41a9971137974d276a2272744b2824682deeeac6811e
libcurl-7.19.7-37.el6_4.s390.rpm     MD5: c164d66a2bb6000f54b6b9791434c994
SHA-256: 0ebfd63e2384f6f474478d178476b3bb81fe5bf6f4a456a42189aeae8b6d84d5
libcurl-7.19.7-37.el6_4.s390x.rpm     MD5: e111087ded782f28824be411d692c1ee
SHA-256: 365494604ee18552f5b7a62170256104e5275072c041114ac815cb250ad679bb
libcurl-devel-7.19.7-37.el6_4.s390.rpm     MD5: e5a7e7fc3ab959197b4959680d5eb7e5
SHA-256: 35e6833943ef75e45ac132c80f7d0bfe52250efd2ccb7cb57dcde04c0e4a9bcc
libcurl-devel-7.19.7-37.el6_4.s390x.rpm     MD5: 52968d816600124810b41677163b3dee
SHA-256: 6f0689bc25ec4fbdd71dae9407385573ac650e0c93ed39afc5504add86925ed4
 
x86_64:
curl-7.19.7-37.el6_4.x86_64.rpm     MD5: 938e076c12d1a42c9003c87892f02ad3
SHA-256: aa635ea5a77b8b38d2db0fe001e4864f15fc27f70bf3f13a995601d0f117ee1b
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
curl-debuginfo-7.19.7-37.el6_4.x86_64.rpm     MD5: 84cf6995c8e891913c1997f99a6b8763
SHA-256: e879ccf6145a35641a26fe992b5925ab599eca3957ab3b1042d6b329ff7f96e1
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-7.19.7-37.el6_4.x86_64.rpm     MD5: 5fa4f4cae3d406e50ed554e521f1c5c2
SHA-256: 03ba87f8a8fb02479ddf055a51ae8702df2bba7cac3369b37e62eef84b4bdba4
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
libcurl-devel-7.19.7-37.el6_4.x86_64.rpm     MD5: f55ec6c07a4f2d8608b73f69803b4d62
SHA-256: 1da279525a27792d513ac3471ec8754a7216550b388830c97ffdaa0843031cf4
 
Red Hat Enterprise Linux Server AUS (v. 6.4)

SRPMS:
curl-7.19.7-37.el6_4.src.rpm     MD5: fa63b075c72f29f7a1603a149fd1375f
SHA-256: 4ac7b9a5b006d2dca3e71cdda959e571c96032b5c59dc0335ee30c74a25d2ee4
 
x86_64:
curl-7.19.7-37.el6_4.x86_64.rpm     MD5: 938e076c12d1a42c9003c87892f02ad3
SHA-256: aa635ea5a77b8b38d2db0fe001e4864f15fc27f70bf3f13a995601d0f117ee1b
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
curl-debuginfo-7.19.7-37.el6_4.x86_64.rpm     MD5: 84cf6995c8e891913c1997f99a6b8763
SHA-256: e879ccf6145a35641a26fe992b5925ab599eca3957ab3b1042d6b329ff7f96e1
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-7.19.7-37.el6_4.x86_64.rpm     MD5: 5fa4f4cae3d406e50ed554e521f1c5c2
SHA-256: 03ba87f8a8fb02479ddf055a51ae8702df2bba7cac3369b37e62eef84b4bdba4
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
libcurl-devel-7.19.7-37.el6_4.x86_64.rpm     MD5: f55ec6c07a4f2d8608b73f69803b4d62
SHA-256: 1da279525a27792d513ac3471ec8754a7216550b388830c97ffdaa0843031cf4
 
Red Hat Enterprise Linux Server EUS (v. 6.4.z)

SRPMS:
curl-7.19.7-37.el6_4.src.rpm     MD5: fa63b075c72f29f7a1603a149fd1375f
SHA-256: 4ac7b9a5b006d2dca3e71cdda959e571c96032b5c59dc0335ee30c74a25d2ee4
 
IA-32:
curl-7.19.7-37.el6_4.i686.rpm     MD5: d241a01e6651f15927422c44b3597186
SHA-256: 81d39709a919445e42517a069d89f09fb2ec761705e4fc05ff956d0665524af8
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
 
PPC:
curl-7.19.7-37.el6_4.ppc64.rpm     MD5: e32e5369e59158d3582e75aa2c50d268
SHA-256: 18d1431fda9c32d80fc1f8738abfaa45e9daa3d63a6080a50a35e6f1a898e282
curl-debuginfo-7.19.7-37.el6_4.ppc.rpm     MD5: 5a057fd3e701b2f33bbedd020a15b57c
SHA-256: 7b0223c16d49da6c5ed6b33ac3a8c7e2b1161a902ae9c04da6d35be87bfd1beb
curl-debuginfo-7.19.7-37.el6_4.ppc64.rpm     MD5: 2d782e0b880e9579da2132059755ce2b
SHA-256: 58af9d4fe905f1f37b7e9d276fcbdacd1f0f97959e5a04f90c1d665b0085b138
libcurl-7.19.7-37.el6_4.ppc.rpm     MD5: 635b4dc150b5f1e31bbb62c65bc982c5
SHA-256: 0acb6a06d7c093b185c51963bcf1fe3527a740acf8cdb35dbe5f2c2b47cc0229
libcurl-7.19.7-37.el6_4.ppc64.rpm     MD5: e5ffc49655d256b43ba20c9a74b250a3
SHA-256: c42488bbf7bf18d14ca8b9e044b1e0e1995863f051df058dc5207bb5d39f473f
libcurl-devel-7.19.7-37.el6_4.ppc.rpm     MD5: 3f15c53627a3a024e0a00e9aac20b71c
SHA-256: ab2912991dd4f6f49fd033a4e3b508456bda7b3fadc14a540b1c40438b8b245d
libcurl-devel-7.19.7-37.el6_4.ppc64.rpm     MD5: 5eaf3010791edfcb32ff65e9c861fb11
SHA-256: 2e54050df63a624aa99e43f7fd029c0f66463efaafdde830526e2a5f921c2acf
 
s390x:
curl-7.19.7-37.el6_4.s390x.rpm     MD5: 36713ff9d5598e845454477e33c7dda0
SHA-256: 3345953bd384e6e9f0f87c9eb23f6a9bae19e2fc463d4084d5e6f8154f7e3c4c
curl-debuginfo-7.19.7-37.el6_4.s390.rpm     MD5: 9ea974b4533c77843b8f653a8713a685
SHA-256: 6b9148f71fa3e5735830a7068c39084a895a95ac80209ce4e46203f25b2ca477
curl-debuginfo-7.19.7-37.el6_4.s390x.rpm     MD5: 9e63f3f86552d88da51eeb837f8bcfa6
SHA-256: 66c322730295f5b31d8b41a9971137974d276a2272744b2824682deeeac6811e
libcurl-7.19.7-37.el6_4.s390.rpm     MD5: c164d66a2bb6000f54b6b9791434c994
SHA-256: 0ebfd63e2384f6f474478d178476b3bb81fe5bf6f4a456a42189aeae8b6d84d5
libcurl-7.19.7-37.el6_4.s390x.rpm     MD5: e111087ded782f28824be411d692c1ee
SHA-256: 365494604ee18552f5b7a62170256104e5275072c041114ac815cb250ad679bb
libcurl-devel-7.19.7-37.el6_4.s390.rpm     MD5: e5a7e7fc3ab959197b4959680d5eb7e5
SHA-256: 35e6833943ef75e45ac132c80f7d0bfe52250efd2ccb7cb57dcde04c0e4a9bcc
libcurl-devel-7.19.7-37.el6_4.s390x.rpm     MD5: 52968d816600124810b41677163b3dee
SHA-256: 6f0689bc25ec4fbdd71dae9407385573ac650e0c93ed39afc5504add86925ed4
 
x86_64:
curl-7.19.7-37.el6_4.x86_64.rpm     MD5: 938e076c12d1a42c9003c87892f02ad3
SHA-256: aa635ea5a77b8b38d2db0fe001e4864f15fc27f70bf3f13a995601d0f117ee1b
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
curl-debuginfo-7.19.7-37.el6_4.x86_64.rpm     MD5: 84cf6995c8e891913c1997f99a6b8763
SHA-256: e879ccf6145a35641a26fe992b5925ab599eca3957ab3b1042d6b329ff7f96e1
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-7.19.7-37.el6_4.x86_64.rpm     MD5: 5fa4f4cae3d406e50ed554e521f1c5c2
SHA-256: 03ba87f8a8fb02479ddf055a51ae8702df2bba7cac3369b37e62eef84b4bdba4
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
libcurl-devel-7.19.7-37.el6_4.x86_64.rpm     MD5: f55ec6c07a4f2d8608b73f69803b4d62
SHA-256: 1da279525a27792d513ac3471ec8754a7216550b388830c97ffdaa0843031cf4
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
curl-7.19.7-37.el6_4.src.rpm     MD5: fa63b075c72f29f7a1603a149fd1375f
SHA-256: 4ac7b9a5b006d2dca3e71cdda959e571c96032b5c59dc0335ee30c74a25d2ee4
 
IA-32:
curl-7.19.7-37.el6_4.i686.rpm     MD5: d241a01e6651f15927422c44b3597186
SHA-256: 81d39709a919445e42517a069d89f09fb2ec761705e4fc05ff956d0665524af8
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
 
x86_64:
curl-7.19.7-37.el6_4.x86_64.rpm     MD5: 938e076c12d1a42c9003c87892f02ad3
SHA-256: aa635ea5a77b8b38d2db0fe001e4864f15fc27f70bf3f13a995601d0f117ee1b
curl-debuginfo-7.19.7-37.el6_4.i686.rpm     MD5: aca38598def4a8d452b6d08b18bf4717
SHA-256: 5f1ad1769414f32fcfd5fe8f862b77acdba35ab0ce4419f2625916e21db48f77
curl-debuginfo-7.19.7-37.el6_4.x86_64.rpm     MD5: 84cf6995c8e891913c1997f99a6b8763
SHA-256: e879ccf6145a35641a26fe992b5925ab599eca3957ab3b1042d6b329ff7f96e1
libcurl-7.19.7-37.el6_4.i686.rpm     MD5: 4c25b4a47a50058fb79d2b2277b957b7
SHA-256: 082949d2f27b4a6a5ecf6dbb5b8c945018b84f0923de954d4745350d16d6acbd
libcurl-7.19.7-37.el6_4.x86_64.rpm     MD5: 5fa4f4cae3d406e50ed554e521f1c5c2
SHA-256: 03ba87f8a8fb02479ddf055a51ae8702df2bba7cac3369b37e62eef84b4bdba4
libcurl-devel-7.19.7-37.el6_4.i686.rpm     MD5: 7779860be443826fcc215cbac3c81538
SHA-256: 8c2d435bd6aba9495134e94d06978fc365f976077a8efb79568d272fb48e2579
libcurl-devel-7.19.7-37.el6_4.x86_64.rpm     MD5: f55ec6c07a4f2d8608b73f69803b4d62
SHA-256: 1da279525a27792d513ac3471ec8754a7216550b388830c97ffdaa0843031cf4
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

965640 - CVE-2013-2174 curl: Loop counter error, leading to heap-based buffer overflow when decoding certain URLs


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/