ELSA-2017-2016

ELSA-2017-2016 - curl security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2017-08-07

Description

[7.29.0-42]
- fix use of uninitialized variable detected by Covscan

[7.29.0-41]
- make FTPS work with --proxytunnel (#1420327)

[7.29.0-40]
- make FTPS work with --proxytunnel (#1420327)

[7.29.0-39]
- work around race condition in PK11_FindSlotByName() in NSS (#1404815)

[7.29.0-38]
- make FTPS work with --proxytunnel (#1420327)

[7.29.0-37]
- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on

[7.29.0-36]
- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)

Related CVEs

CVE-2016-7167

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	curl-7.29.0-42.el7.src.rpm	46d6d1d1795335940eb4d082dbdba4f4	ELBA-2021-9230
	curl-7.29.0-42.el7.aarch64.rpm	b97e4f39c43881bad3f41a9343a6c32e	ELBA-2021-9230
	libcurl-7.29.0-42.el7.aarch64.rpm	3536110ae45e6e60834e50181f141489	ELBA-2021-9230
	libcurl-devel-7.29.0-42.el7.aarch64.rpm	f4e52c2cf0b580f8c764003c4d178eba	ELBA-2021-9230
Oracle Linux 7 (x86_64)	curl-7.29.0-42.el7.src.rpm	46d6d1d1795335940eb4d082dbdba4f4	ELBA-2021-9230
	curl-7.29.0-42.el7.x86_64.rpm	f3be5ba922196bb4bb5531a03cc1e431	ELBA-2021-9230
	libcurl-7.29.0-42.el7.i686.rpm	7870783cace080ccc6af5401c7cd2115	ELBA-2021-9230
	libcurl-7.29.0-42.el7.x86_64.rpm	2e8761e340a419eebd6cf21e56b63eab	ELBA-2021-9230
	libcurl-devel-7.29.0-42.el7.i686.rpm	28f6bfb86ecb48c96fb5ff6ee46bd176	ELBA-2021-9230
	libcurl-devel-7.29.0-42.el7.x86_64.rpm	27e113cd3c22a3b2af6d6f12a229a437	ELBA-2021-9230

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team