ELBA-2019-4253

ELBA-2019-4253 - curl bug fix update

Type:	BUG
Impact:	NA
Release Date:	2019-12-18

Description

[7.19.7-54.0.1]
- Security Fixes [OraBug: 28939992]
- CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
- CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
- CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
- CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
- CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
- CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
- CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
- CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)
- use PK11_CreateManagedGenericObject in libcurl to prevent memory leak [orabug 28666473]

[7.19.7-54]
- fix auth failure with duplicated WWW-Authenticate header (#1757643)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	curl-7.19.7-54.0.1.el6_10.src.rpm	1ac51c7ab41a2296c16b0135ff22a3ae5a925b783f864b75c28aac179f7936b7	ELSA-2020-5561	ol6_i386_latest
	curl-7.19.7-54.0.1.el6_10.src.rpm	1ac51c7ab41a2296c16b0135ff22a3ae5a925b783f864b75c28aac179f7936b7	ELSA-2020-5561	ol6_u10_i386_patch
	curl-7.19.7-54.0.1.el6_10.i686.rpm	3d99ef05cca5fd31fa1139b3c8fa6fa31da2269223d3654d174d7fa1acd401cd	ELSA-2020-5561	ol6_i386_latest
	curl-7.19.7-54.0.1.el6_10.i686.rpm	3d99ef05cca5fd31fa1139b3c8fa6fa31da2269223d3654d174d7fa1acd401cd	ELSA-2020-5561	ol6_u10_i386_patch
	libcurl-7.19.7-54.0.1.el6_10.i686.rpm	9e7b7bd187f8787d136b261f78e249435309e19a4c93bc8043806e43f86b1911	ELSA-2020-5561	ol6_i386_latest
	libcurl-7.19.7-54.0.1.el6_10.i686.rpm	9e7b7bd187f8787d136b261f78e249435309e19a4c93bc8043806e43f86b1911	ELSA-2020-5561	ol6_u10_i386_patch
	libcurl-devel-7.19.7-54.0.1.el6_10.i686.rpm	335c97e9600c15e3c2d79ce47da7612de96f9c696f9886511e6c83b8812f4166	ELSA-2020-5561	ol6_i386_latest
	libcurl-devel-7.19.7-54.0.1.el6_10.i686.rpm	335c97e9600c15e3c2d79ce47da7612de96f9c696f9886511e6c83b8812f4166	ELSA-2020-5561	ol6_u10_i386_patch
Oracle Linux 6 (x86_64)	curl-7.19.7-54.0.1.el6_10.src.rpm	1ac51c7ab41a2296c16b0135ff22a3ae5a925b783f864b75c28aac179f7936b7	ELSA-2020-5561	ol6_u10_x86_64_patch
	curl-7.19.7-54.0.1.el6_10.src.rpm	1ac51c7ab41a2296c16b0135ff22a3ae5a925b783f864b75c28aac179f7936b7	ELSA-2020-5561	ol6_x86_64_latest
	curl-7.19.7-54.0.1.el6_10.x86_64.rpm	1b8dd3ffa564841e4efb63d3f0467c14e2245a2c2c6697cea4b924e11465cafd	ELSA-2020-5561	exadata_dbserver_18.1.25.0.0_x86_64_base
	curl-7.19.7-54.0.1.el6_10.x86_64.rpm	1b8dd3ffa564841e4efb63d3f0467c14e2245a2c2c6697cea4b924e11465cafd	ELSA-2020-5561	ol6_u10_x86_64_patch
	curl-7.19.7-54.0.1.el6_10.x86_64.rpm	1b8dd3ffa564841e4efb63d3f0467c14e2245a2c2c6697cea4b924e11465cafd	ELSA-2020-5561	ol6_x86_64_latest
	libcurl-7.19.7-54.0.1.el6_10.i686.rpm	9e7b7bd187f8787d136b261f78e249435309e19a4c93bc8043806e43f86b1911	ELSA-2020-5561	ol6_u10_x86_64_patch
	libcurl-7.19.7-54.0.1.el6_10.i686.rpm	9e7b7bd187f8787d136b261f78e249435309e19a4c93bc8043806e43f86b1911	ELSA-2020-5561	ol6_x86_64_latest
	libcurl-7.19.7-54.0.1.el6_10.x86_64.rpm	0b40371eef1b07b0361dc00af729aaaf55d49712a0e17dc711943edd5108baa5	ELSA-2020-5561	exadata_dbserver_18.1.25.0.0_x86_64_base
	libcurl-7.19.7-54.0.1.el6_10.x86_64.rpm	0b40371eef1b07b0361dc00af729aaaf55d49712a0e17dc711943edd5108baa5	ELSA-2020-5561	ol6_u10_x86_64_patch
	libcurl-7.19.7-54.0.1.el6_10.x86_64.rpm	0b40371eef1b07b0361dc00af729aaaf55d49712a0e17dc711943edd5108baa5	ELSA-2020-5561	ol6_x86_64_latest
	libcurl-devel-7.19.7-54.0.1.el6_10.i686.rpm	335c97e9600c15e3c2d79ce47da7612de96f9c696f9886511e6c83b8812f4166	ELSA-2020-5561	ol6_u10_x86_64_patch
	libcurl-devel-7.19.7-54.0.1.el6_10.i686.rpm	335c97e9600c15e3c2d79ce47da7612de96f9c696f9886511e6c83b8812f4166	ELSA-2020-5561	ol6_x86_64_latest
	libcurl-devel-7.19.7-54.0.1.el6_10.x86_64.rpm	60567cf3acae07d22b004424eb53d6fc4e7b4025c969dd637555f196363bda86	ELSA-2020-5561	ol6_u10_x86_64_patch
	libcurl-devel-7.19.7-54.0.1.el6_10.x86_64.rpm	60567cf3acae07d22b004424eb53d6fc4e7b4025c969dd637555f196363bda86	ELSA-2020-5561	ol6_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team