ELSA-2010-0273

ELSA-2010-0273 - curl security, bug fix and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2010-04-05

Description

[7.15.5-9]
- http://curl.haxx.se/docs/adv_20100209.html (#565408)

[7.15.5-8]
- mention lack of IPv6, FTPS and LDAP support while using a socks proxy
(#473128)
- avoid tight loop if an upload connection is broken (#479967)
- add options --ftp-account and --ftp-alternative-to-user to program help
(#517084)
- fix crash when reusing connection after negotiate-auth (#517199)
- support for CRL loading from a PEM file (#532069)

[7.15.5-7]
- sync patch for CVE-2007-0037 with 5.3.Z
Related: #485290

[7.15.5-6]
- fix CVE-2009-2417
Resolves: #516258

[7.15.5-5]
- forwardport one hunk from upstream curl-7.15.1
Related: #485290

[7.15.5-4]
- fix hunk applied to wrong place due to nonzero patch fuzz
Related: #485290

[7.15.5-3]
- fix CVE-2007-0037
Resolves: #485290

Related CVEs

CVE-2010-0734

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	el5_u5_i386_base
	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	ol5_i386_latest
	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	ol5_u6_i386_base
	curl-7.15.5-9.el5.i386.rpm	567fab08e6215605a548e06d67ca8c8859e943e86286b7850a8f07bc339510dc	ELSA-2013-0983	el5_u5_i386_base
	curl-7.15.5-9.el5.i386.rpm	567fab08e6215605a548e06d67ca8c8859e943e86286b7850a8f07bc339510dc	ELSA-2013-0983	ol5_i386_latest
	curl-7.15.5-9.el5.i386.rpm	567fab08e6215605a548e06d67ca8c8859e943e86286b7850a8f07bc339510dc	ELSA-2013-0983	ol5_u6_i386_base
	curl-devel-7.15.5-9.el5.i386.rpm	af11149cbcd00682275a6656777e28580f004c8e8ae0ae2af8b5b2ac12e11bbf	ELSA-2013-0983	el5_u5_i386_base
	curl-devel-7.15.5-9.el5.i386.rpm	af11149cbcd00682275a6656777e28580f004c8e8ae0ae2af8b5b2ac12e11bbf	ELSA-2013-0983	ol5_i386_latest
	curl-devel-7.15.5-9.el5.i386.rpm	af11149cbcd00682275a6656777e28580f004c8e8ae0ae2af8b5b2ac12e11bbf	ELSA-2013-0983	ol5_u6_i386_base
Oracle Linux 5 (ia64)	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	el5_u5_ia64_base
	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	ol5_ia64_latest
	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	ol5_u6_ia64_base
	curl-7.15.5-9.el5.ia64.rpm	b82bfc9dcbf4a356cba69a39d75b7496626a07b6fa85b5c2e7cefb61d7ba2a43	ELSA-2013-0983	el5_u5_ia64_base
	curl-7.15.5-9.el5.ia64.rpm	b82bfc9dcbf4a356cba69a39d75b7496626a07b6fa85b5c2e7cefb61d7ba2a43	ELSA-2013-0983	ol5_ia64_latest
	curl-7.15.5-9.el5.ia64.rpm	b82bfc9dcbf4a356cba69a39d75b7496626a07b6fa85b5c2e7cefb61d7ba2a43	ELSA-2013-0983	ol5_u6_ia64_base
	curl-devel-7.15.5-9.el5.ia64.rpm	2c45f88d638151b5f6a889c49c3d8a1157815d5b89be0331602eddb6f9a0eefe	ELSA-2013-0983	el5_u5_ia64_base
	curl-devel-7.15.5-9.el5.ia64.rpm	2c45f88d638151b5f6a889c49c3d8a1157815d5b89be0331602eddb6f9a0eefe	ELSA-2013-0983	ol5_ia64_latest
	curl-devel-7.15.5-9.el5.ia64.rpm	2c45f88d638151b5f6a889c49c3d8a1157815d5b89be0331602eddb6f9a0eefe	ELSA-2013-0983	ol5_u6_ia64_base
Oracle Linux 5 (x86_64)	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	el5_u5_x86_64_base
	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	ol5_u6_x86_64_base
	curl-7.15.5-9.el5.src.rpm	a713b21479390fd202a9a81c5a2fc7e0a6daa709e7bb58556c294a403f8b56c9	ELSA-2013-0983	ol5_x86_64_latest
	curl-7.15.5-9.el5.i386.rpm	567fab08e6215605a548e06d67ca8c8859e943e86286b7850a8f07bc339510dc	ELSA-2013-0983	el5_u5_x86_64_base
	curl-7.15.5-9.el5.i386.rpm	567fab08e6215605a548e06d67ca8c8859e943e86286b7850a8f07bc339510dc	ELSA-2013-0983	ol5_u6_x86_64_base
	curl-7.15.5-9.el5.i386.rpm	567fab08e6215605a548e06d67ca8c8859e943e86286b7850a8f07bc339510dc	ELSA-2013-0983	ol5_x86_64_latest
	curl-7.15.5-9.el5.x86_64.rpm	e8fd7ddae93243395858ac4b2a27884dc9884c96ba123af5b05f0ad358e4ff1d	ELSA-2013-0983	el5_u5_x86_64_base
	curl-7.15.5-9.el5.x86_64.rpm	e8fd7ddae93243395858ac4b2a27884dc9884c96ba123af5b05f0ad358e4ff1d	ELSA-2013-0983	ol5_u6_x86_64_base
	curl-7.15.5-9.el5.x86_64.rpm	e8fd7ddae93243395858ac4b2a27884dc9884c96ba123af5b05f0ad358e4ff1d	ELSA-2013-0983	ol5_x86_64_latest
	curl-devel-7.15.5-9.el5.i386.rpm	af11149cbcd00682275a6656777e28580f004c8e8ae0ae2af8b5b2ac12e11bbf	ELSA-2013-0983	el5_u5_x86_64_base
	curl-devel-7.15.5-9.el5.i386.rpm	af11149cbcd00682275a6656777e28580f004c8e8ae0ae2af8b5b2ac12e11bbf	ELSA-2013-0983	ol5_u6_x86_64_base
	curl-devel-7.15.5-9.el5.i386.rpm	af11149cbcd00682275a6656777e28580f004c8e8ae0ae2af8b5b2ac12e11bbf	ELSA-2013-0983	ol5_x86_64_latest
	curl-devel-7.15.5-9.el5.x86_64.rpm	100cbc8e26ee662959c69ae3e516e2e227363736afeb3827bb872ce8b0a5ae95	ELSA-2013-0983	el5_u5_x86_64_base
	curl-devel-7.15.5-9.el5.x86_64.rpm	100cbc8e26ee662959c69ae3e516e2e227363736afeb3827bb872ce8b0a5ae95	ELSA-2013-0983	ol5_u6_x86_64_base
	curl-devel-7.15.5-9.el5.x86_64.rpm	100cbc8e26ee662959c69ae3e516e2e227363736afeb3827bb872ce8b0a5ae95	ELSA-2013-0983	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team