Red Hat Security AdvisoryRHSA-2010:0329
curl security update
Released 2010-03-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 curl-7.10.6-11.rhel3, curl-7.10.6-11.rhel3.i386, curl-devel-7.10.6-11.rhel3 +1
- Red Hat Enterprise Linux AS version 3 curl-7.10.6-11.rhel3, curl-7.10.6-11.rhel3.i386, curl-7.10.6-11.rhel3.ia64 +5
- Red Hat Enterprise Linux AS version 4 curl-7.12.1-11.1.el4_8.3, curl-7.12.1-11.1.el4_8.3.i386, curl-7.12.1-11.1.el4_8.3.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 curl-7.12.1-11.1.el4_8.3, curl-7.12.1-11.1.el4_8.3.i386, curl-devel-7.12.1-11.1.el4_8.3 +1
- Red Hat Enterprise Linux ES version 3 curl-7.10.6-11.rhel3, curl-7.10.6-11.rhel3.i386, curl-7.10.6-11.rhel3.ia64 +3
- Red Hat Enterprise Linux ES version 4 curl-7.12.1-11.1.el4_8.3, curl-7.12.1-11.1.el4_8.3.i386, curl-7.12.1-11.1.el4_8.3.ia64 +3
- Red Hat Enterprise Linux WS version 3 curl-7.10.6-11.rhel3, curl-7.10.6-11.rhel3.i386, curl-7.10.6-11.rhel3.ia64 +3
- Red Hat Enterprise Linux WS version 4 curl-7.12.1-11.1.el4_8.3, curl-7.12.1-11.1.el4_8.3.i386, curl-7.12.1-11.1.el4_8.3.ia64 +3
Fixes 1 record
Priority LOW 36
content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote att…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03643 · Published 2010-03-19 · Fixed CWE-264
