Red Hat Security AdvisoryRHSA-2010:0273
curl security, bug fix and enhancement update
Released 2010-03-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) curl-7.15.5-9.el5, curl-7.15.5-9.el5.i386, curl-7.15.5-9.el5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) curl-7.15.5-9.el5, curl-7.15.5-9.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) curl-7.15.5-9.el5, curl-devel-7.15.5-9.el5, curl-devel-7.15.5-9.el5.i386
Fixes 1 record
Priority LOW 36
content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote att…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03643 · Published 2010-03-19 · Fixed CWE-264
