Red Hat Security Advisory

RHSA-2020:4599

curl security and bug fix update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) curl-7.61.1-14.el8, libcurl-7.61.1-14.el8, libcurl-devel-7.61.1-14.el8 +1

Fixes 1 record

TI-2020-06595 CVE-2020-8177 · GHSA-wqc8-jpfx-w9g4

Injection in https://github.com/curl/curl

LOW 39

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01288 Published 2020-12-14 Partial fix CWE-99