Red Hat Security AdvisoryRHSA-2020:3916
curl security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) curl-7.29.0-59.el7, libcurl-7.29.0-59.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libcurl-devel-7.29.0-59.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) curl-7.29.0-59.el7, libcurl-7.29.0-59.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcurl-devel-7.29.0-59.el7
- Red Hat Enterprise Linux Server (v. 7) curl-7.29.0-59.el7, libcurl-7.29.0-59.el7, libcurl-7.29.0-59.el7.ppc +2
- Red Hat Enterprise Linux Workstation (v. 7) curl-7.29.0-59.el7, libcurl-7.29.0-59.el7, libcurl-devel-7.29.0-59.el7
Fixes 1 record
Priority HIGH 66
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.17939 · Published 2019-09-16 · Partial fix CWE-122