Fedora Legacy Test Update Notification: curl

[Marc Deslauriers]

---------------------------------------------------------------------
Fedora Legacy Test Update Notification
FEDORALEGACY-2005-152917
Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152917
2005-06-20
---------------------------------------------------------------------

Name        : curl
Versions    : rh73: curl-7.9.5-2.2.legacy
Versions    : rh9: curl-7.9.8-5.2.legacy
Versions    : fc1: curl-7.10.6-7.2.legacy
Versions    : fc2: curl-7.11.1-1.2.legacy
Summary     : A utility for getting files from remote servers
Description :
cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
Dict servers, using any of the supported protocols. cURL is designed
to work without user interaction or any kind of interactivity. cURL
offers many useful capabilities, like proxy support, user
authentication, FTP upload, HTTP post, and file transfer resume.

---------------------------------------------------------------------
Update Information:

Updated curl packages are now available.

cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
Dict servers, using any of the supported protocols. cURL is designed
to work without user interaction or any kind of interactivity.

Multiple buffer overflow bugs were found in the way curl processes
base64 encoded replies. If a victim can be tricked into visiting a URL
with curl, a malicious web server could execute arbitrary code on a
victim's machine. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0490 to this issue.

All users of curl are advised to upgrade to these updated packages,
which contain backported fixes for these issues.

---------------------------------------------------------------------
Changelogs

rh73:
* Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.9.5-2.2.legacy
- Added missing groff and bison BuildRequires

* Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.9.5-2.1.legacy
- Added patch for CAN-2005-0490 Multiple stack based buffer overflows in
curl

rh9:
* Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.9.8-5.2.legacy
- Added missing zlib-devel, groff and bison BuildRequires

* Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.9.8-5.1.legacy
- Added patch for CAN-2005-0490 Multiple stack based buffer overflows in
curl

fc1:
* Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.10.6-7.2.legacy
- Added missing zlib-devel, groff and bison BuildRequires

* Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.10.6-7.1.legacy
- Added patch for CAN-2005-0490 Multiple stack based buffer overflows in
curl

fc2:
* Sun Jun 19 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.11.1-1.2.legacy
- Added missing zlib-devel, groff, bison BuildRequires

* Sun Jun 12 2005 Marc Deslauriers <marcdeslauriers at videotron.ca>
7.11.1-1.1.legacy
- Added patch for CAN-2005-0490 Multiple stack based buffer overflows in
curl

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedoralegacy.org/
(sha1sums)

rh73:
8032bf94d434873de3f02100fd8eb36b206cba02
redhat/7.3/updates-testing/i386/curl-7.9.5-2.2.legacy.i386.rpm
2d95c39024f58f3a7897e58da3da39dd297c8109
redhat/7.3/updates-testing/i386/curl-devel-7.9.5-2.2.legacy.i386.rpm
559d63a957091747972eb963a29642ef7c3835d7
redhat/7.3/updates-testing/SRPMS/curl-7.9.5-2.2.legacy.src.rpm

rh9:
ca02f070ca45c96cfb93157e88b81f96c4646051
redhat/9/updates-testing/i386/curl-7.9.8-5.2.legacy.i386.rpm
57329416fa302765f25ba963bf9a6d334a225e72
redhat/9/updates-testing/i386/curl-devel-7.9.8-5.2.legacy.i386.rpm
e793df5a65927b98203c0308972389cc80896749
redhat/9/updates-testing/SRPMS/curl-7.9.8-5.2.legacy.src.rpm

fc1:
c083d601e3b6f1c54dede72bb635e0215bb6230b
fedora/1/updates-testing/i386/curl-7.10.6-7.2.legacy.i386.rpm
835a427b82413d4ccc83a17dbc0ea0204dfd1e4a
fedora/1/updates-testing/i386/curl-devel-7.10.6-7.2.legacy.i386.rpm
cb59fc5fd7f74e1e5d407fe6fdd4d086e7f93bac
fedora/1/updates-testing/SRPMS/curl-7.10.6-7.2.legacy.src.rpm

fc2:
c8c23e7748058bd6965efb188fc02fc27bc1f1c1
fedora/2/updates-testing/i386/curl-7.11.1-1.2.legacy.i386.rpm
401b44aeb653730fb6dcc7b83ecb88f9600f64cc
fedora/2/updates-testing/i386/curl-devel-7.11.1-1.2.legacy.i386.rpm
d0fbc3ee3137034a02cdc136959f7e119daae817
fedora/2/updates-testing/SRPMS/curl-7.11.1-1.2.legacy.src.rpm

---------------------------------------------------------------------

Please test and comment in bugzilla.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20050620/272fe039/attachment.sig>