[SECURITY] Fedora Core 3 Update: curl-7.12.3-4.fc3

Ivana Varekova varekova at redhat.com
Tue Oct 18 17:12:04 UTC 2005


---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1000
2005-10-18
---------------------------------------------------------------------

Product     : Fedora Core 3
Name        : curl
Version     : 7.12.3                      
Release     : 4.fc3                  
Summary     : A utility for getting files from remote servers (FTP, HTTP, and others).
Description :
cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
Dict servers, using any of the supported protocols. cURL is designed
to work without user interaction or any kind of interactivity. cURL
offers many useful capabilities, like proxy support, user
authentication, FTP upload, HTTP post, and file transfer resume.

---------------------------------------------------------------------
Update Information:

This package fixes a buffer overflow bug in NTLM
authentication code of curl (CAN-2005-3185).
---------------------------------------------------------------------
* Tue Oct 18 2005 Ivana Varekova <varekova at redhat.com> 7.12.3.4.fc3
- fix bug 170682 CAN-2005-3185 NTLM buffer overflow


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

cfe56d0b45d31bafe71f166360931eb8  SRPMS/curl-7.12.3-4.fc3.src.rpm
0cbeb4c1f65e1cf21992cdda8cd78134  x86_64/curl-7.12.3-4.fc3.x86_64.rpm
39e0ff077a453a7a7869f0027286f988  x86_64/curl-devel-7.12.3-4.fc3.x86_64.rpm
9c31f946e0821befba9c2e52fbf4868d  x86_64/debug/curl-debuginfo-7.12.3-4.fc3.x86_64.rpm
723a4786b312c859cf627c7a64f1035e  x86_64/curl-7.12.3-4.fc3.i386.rpm
723a4786b312c859cf627c7a64f1035e  i386/curl-7.12.3-4.fc3.i386.rpm
a235e0390394f3647649e3aa821ea0d0  i386/curl-devel-7.12.3-4.fc3.i386.rpm
a0601fce1eea8b5fcf0702985b86eda8  i386/debug/curl-debuginfo-7.12.3-4.fc3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------




More information about the announce mailing list