Red Hat Security AdvisoryRHSA-2020:5002
curl security update
Released 2020-11-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) curl-7.29.0-59.el7_9.1, libcurl-7.29.0-59.el7_9.1
- Red Hat Enterprise Linux Client Optional (v. 7) libcurl-devel-7.29.0-59.el7_9.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcurl-devel-7.29.0-59.el7_9.1
- Red Hat Enterprise Linux Server (v. 7) curl-7.29.0-59.el7_9.1, libcurl-7.29.0-59.el7_9.1, libcurl-7.29.0-59.el7_9.1.ppc +2
- Red Hat Enterprise Linux Workstation (v. 7) curl-7.29.0-59.el7_9.1, libcurl-7.29.0-59.el7_9.1, libcurl-devel-7.29.0-59.el7_9.1
Fixes 1 record
Priority LOW 39
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01288 · Published 2020-12-14 · Partial fix CWE-99
