Red Hat Security AdvisoryRHSA-2021:0877
curl security update
Released 2021-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) curl-7.29.0-51.el7_6.4, libcurl-7.29.0-51.el7_6.4
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) libcurl-devel-7.29.0-51.el7_6.4
- Red Hat Enterprise Linux Server EUS (v. 7.6) curl-7.29.0-51.el7_6.4, libcurl-7.29.0-51.el7_6.4, libcurl-7.29.0-51.el7_6.4.ppc +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) curl-7.29.0-51.el7_6.4, libcurl-7.29.0-51.el7_6.4, libcurl-devel-7.29.0-51.el7_6.4
Fixes 1 record
Priority HIGH 66
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.17939 · Published 2019-09-16 · Partial fix CWE-122