Red Hat Security AdvisoryRHSA-2017:0847
curl security update
Released 2017-03-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) curl-7.19.7-53.el6_9, libcurl-7.19.7-53.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) libcurl-devel-7.19.7-53.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) curl-7.19.7-53.el6_9, libcurl-7.19.7-53.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libcurl-devel-7.19.7-53.el6_9
- Red Hat Enterprise Linux Server (v. 6) curl-7.19.7-53.el6_9, libcurl-7.19.7-53.el6_9, libcurl-7.19.7-53.el6_9.ppc +2
- Red Hat Enterprise Linux Workstation (v. 6) curl-7.19.7-53.el6_9, libcurl-7.19.7-53.el6_9, libcurl-devel-7.19.7-53.el6_9
Fixes 1 record
Priority MEDIUM 49
curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVE_GSSAPI define was meanwhile substituted by U…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03796 · Published 2018-03-12 · Fixed CWE-287
