ELSA-2014-0561

ELSA-2014-0561 - curl security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2014-05-27

Description

[7.19.7-37.el6_5.3]
- fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
- fix connection re-use when using different log-in credentials (CVE-2014-0138)

[7.19.7-37.el6_5.2]
- fix authentication failure when server offers multiple auth options (#1096797)

[7.19.7-37.el6_5.1]
- refresh expired cookie in test172 from upstream test-suite (#1092486)
- fix a memory leak caused by write after close (#1092479)
- nss: implement non-blocking SSL handshake (#1092480)

Related CVEs

CVE-2014-0015

CVE-2014-0138

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	curl-7.19.7-37.el6_5.3.src.rpm	6a4e2bdffac4c5fa862c8fae178c7181f92bf128073418dd735104a14497fd71	ELSA-2020-5561	ol6_i386_latest_archive
	curl-7.19.7-37.el6_5.3.src.rpm	6a4e2bdffac4c5fa862c8fae178c7181f92bf128073418dd735104a14497fd71	ELSA-2020-5561	ol6_u5_i386_patch
	curl-7.19.7-37.el6_5.3.src.rpm	6a4e2bdffac4c5fa862c8fae178c7181f92bf128073418dd735104a14497fd71	ELSA-2020-5561	ol6_u6_i386_base
	curl-7.19.7-37.el6_5.3.i686.rpm	e2b5f1368d1f4212929b65ed5d73eaecf3f9c9754b6197e49d1aa39d8ea443e6	ELSA-2020-5561	ol6_i386_latest_archive
	curl-7.19.7-37.el6_5.3.i686.rpm	e2b5f1368d1f4212929b65ed5d73eaecf3f9c9754b6197e49d1aa39d8ea443e6	ELSA-2020-5561	ol6_u5_i386_patch
	curl-7.19.7-37.el6_5.3.i686.rpm	e2b5f1368d1f4212929b65ed5d73eaecf3f9c9754b6197e49d1aa39d8ea443e6	ELSA-2020-5561	ol6_u6_i386_base
	libcurl-7.19.7-37.el6_5.3.i686.rpm	fd09ac94ce796a28e417bb0dc30ea3ebe89ffa07f1fdfc51cccf5953364005f5	ELSA-2020-5561	ol6_i386_latest_archive
	libcurl-7.19.7-37.el6_5.3.i686.rpm	fd09ac94ce796a28e417bb0dc30ea3ebe89ffa07f1fdfc51cccf5953364005f5	ELSA-2020-5561	ol6_u5_i386_patch
	libcurl-7.19.7-37.el6_5.3.i686.rpm	fd09ac94ce796a28e417bb0dc30ea3ebe89ffa07f1fdfc51cccf5953364005f5	ELSA-2020-5561	ol6_u6_i386_base
	libcurl-devel-7.19.7-37.el6_5.3.i686.rpm	4d6fb58f7fba31a20d410f51aa6a65543bb3f394d81d9253b54bb6160242f2dd	ELSA-2020-5561	ol6_i386_latest_archive
	libcurl-devel-7.19.7-37.el6_5.3.i686.rpm	4d6fb58f7fba31a20d410f51aa6a65543bb3f394d81d9253b54bb6160242f2dd	ELSA-2020-5561	ol6_u5_i386_patch
	libcurl-devel-7.19.7-37.el6_5.3.i686.rpm	4d6fb58f7fba31a20d410f51aa6a65543bb3f394d81d9253b54bb6160242f2dd	ELSA-2020-5561	ol6_u6_i386_base
Oracle Linux 6 (x86_64)	curl-7.19.7-37.el6_5.3.src.rpm	6a4e2bdffac4c5fa862c8fae178c7181f92bf128073418dd735104a14497fd71	ELSA-2020-5561	ol6_u5_x86_64_patch
	curl-7.19.7-37.el6_5.3.src.rpm	6a4e2bdffac4c5fa862c8fae178c7181f92bf128073418dd735104a14497fd71	ELSA-2020-5561	ol6_u6_x86_64_base
	curl-7.19.7-37.el6_5.3.src.rpm	6a4e2bdffac4c5fa862c8fae178c7181f92bf128073418dd735104a14497fd71	ELSA-2020-5561	ol6_x86_64_latest_archive
	curl-7.19.7-37.el6_5.3.x86_64.rpm	9f0e6c6a228a1ec70320bac041b7f88434e04fe5ecfe0553ae9ec5ed66694bcb	ELSA-2020-5561	exadata_dbserver_12.1.2.1.0_x86_64_base
	curl-7.19.7-37.el6_5.3.x86_64.rpm	9f0e6c6a228a1ec70320bac041b7f88434e04fe5ecfe0553ae9ec5ed66694bcb	ELSA-2020-5561	ol6_u5_x86_64_patch
	curl-7.19.7-37.el6_5.3.x86_64.rpm	9f0e6c6a228a1ec70320bac041b7f88434e04fe5ecfe0553ae9ec5ed66694bcb	ELSA-2020-5561	ol6_u6_x86_64_base
	curl-7.19.7-37.el6_5.3.x86_64.rpm	9f0e6c6a228a1ec70320bac041b7f88434e04fe5ecfe0553ae9ec5ed66694bcb	ELSA-2020-5561	ol6_x86_64_latest_archive
	libcurl-7.19.7-37.el6_5.3.i686.rpm	fd09ac94ce796a28e417bb0dc30ea3ebe89ffa07f1fdfc51cccf5953364005f5	ELSA-2020-5561	ol6_u5_x86_64_patch
	libcurl-7.19.7-37.el6_5.3.i686.rpm	fd09ac94ce796a28e417bb0dc30ea3ebe89ffa07f1fdfc51cccf5953364005f5	ELSA-2020-5561	ol6_u6_x86_64_base
	libcurl-7.19.7-37.el6_5.3.i686.rpm	fd09ac94ce796a28e417bb0dc30ea3ebe89ffa07f1fdfc51cccf5953364005f5	ELSA-2020-5561	ol6_x86_64_latest_archive
	libcurl-7.19.7-37.el6_5.3.x86_64.rpm	7585b5697e227597adb94ea3b1c2da506e18aedd2e5542221e1c9be86810f25e	ELSA-2020-5561	exadata_dbserver_12.1.2.1.0_x86_64_base
	libcurl-7.19.7-37.el6_5.3.x86_64.rpm	7585b5697e227597adb94ea3b1c2da506e18aedd2e5542221e1c9be86810f25e	ELSA-2020-5561	ol6_u5_x86_64_patch
	libcurl-7.19.7-37.el6_5.3.x86_64.rpm	7585b5697e227597adb94ea3b1c2da506e18aedd2e5542221e1c9be86810f25e	ELSA-2020-5561	ol6_u6_x86_64_base
	libcurl-7.19.7-37.el6_5.3.x86_64.rpm	7585b5697e227597adb94ea3b1c2da506e18aedd2e5542221e1c9be86810f25e	ELSA-2020-5561	ol6_x86_64_latest_archive
	libcurl-devel-7.19.7-37.el6_5.3.i686.rpm	4d6fb58f7fba31a20d410f51aa6a65543bb3f394d81d9253b54bb6160242f2dd	ELSA-2020-5561	ol6_u5_x86_64_patch
	libcurl-devel-7.19.7-37.el6_5.3.i686.rpm	4d6fb58f7fba31a20d410f51aa6a65543bb3f394d81d9253b54bb6160242f2dd	ELSA-2020-5561	ol6_u6_x86_64_base
	libcurl-devel-7.19.7-37.el6_5.3.i686.rpm	4d6fb58f7fba31a20d410f51aa6a65543bb3f394d81d9253b54bb6160242f2dd	ELSA-2020-5561	ol6_x86_64_latest_archive
	libcurl-devel-7.19.7-37.el6_5.3.x86_64.rpm	1a3f3b1ce466a372fc297256df6e2fe3a44723997526f49f477fbe884a615f47	ELSA-2020-5561	ol6_u5_x86_64_patch
	libcurl-devel-7.19.7-37.el6_5.3.x86_64.rpm	1a3f3b1ce466a372fc297256df6e2fe3a44723997526f49f477fbe884a615f47	ELSA-2020-5561	ol6_u6_x86_64_base
	libcurl-devel-7.19.7-37.el6_5.3.x86_64.rpm	1a3f3b1ce466a372fc297256df6e2fe3a44723997526f49f477fbe884a615f47	ELSA-2020-5561	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team