Scientific Linux: 2010-03-30 Moderate: curl Security Fix

Date: Wed, 7 Apr 2010 13:30:19 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: curl on SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: curl security, bug fix and enhancement update
Issue date:	2010-03-30
CVE Names:	CVE-2010-0734

Wesley Miaw discovered that when deflate compression was used, libcurl
could call the registered write callback function with data exceeding
the documented limit. A malicious server could use this flaw to crash an
application using libcurl or, potentially, execute arbitrary code. Note:
This issue only affected applications using libcurl that rely on the
documented data size limit, and that copy the data to the insufficiently
sized buffer. (CVE-2010-0734)

This update also fixes the following bugs:

* when using curl to upload a file, if the connection was broken or
reset by the server during the transfer, curl immediately started using
100% CPU and failed to acknowledge that the transfer had failed. With
this update, curl displays an appropriate error message and exits when
an upload fails mid-transfer due to a broken or reset connection.
(BZ#479967)

* libcurl experienced a segmentation fault when attempting to reuse a
connection after performing GSS-negotiate authentication, which in turn
caused the curl program to crash. This update fixes this bug so that
reused connections are able to be successfully established even after
GSS-negotiate authentication has been performed. (BZ#517199)

As well, this update adds the following enhancements:

* curl now supports loading Certificate Revocation Lists (CRLs) from a
Privacy Enhanced Mail (PEM) file. When curl attempts to access sites
that have had their certificate revoked in a CRL, curl refuses access to
those sites. (BZ#532069)

* the curl(1) manual page has been updated to clarify that the
"--socks4" and "--socks5" options do not work with the IPv6, FTPS, or
LDAP protocols. (BZ#473128)

* the curl utility's program help, which is accessed by running "curl
-h", has been updated with descriptions for the "--ftp-account" and
"--ftp-alternative-to-user" options. (BZ#517084)

All running applications using libcurl must be restarted for the update
to take effect.

SL 5.x

 SRPMS:
curl-7.15.5-9.el5.src.rpm
 i386:
curl-7.15.5-9.el5.i386.rpm
curl-devel-7.15.5-9.el5.i386.rpm
 x86_64:
curl-7.15.5-9.el5.i386.rpm
curl-7.15.5-9.el5.x86_64.rpm
curl-devel-7.15.5-9.el5.i386.rpm
curl-devel-7.15.5-9.el5.x86_64.rpm

-Connie Sieh
-Troy Dawson