Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Slackware 14.x: 2017-297-01 critical: curl IMAP information leak

slackware
Calendar Grey October 24, 2017
Dist Slackware Esm H88
Recent updates for the curl library have been released to address a vulnerability within the IMAP protocol that could lead to potential crashes or unauthorized data exposure in Slackware.
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.56.1-i586-1_slack14.2.txz: Upgraded. This update fixes a security issue: IMAP FETCH response out of bounds read may cause a crash or information leak. For more information, see: https://curl.se/docs/CVE-2017-1000257.html https://www.cve.org/CVERecord?id=CVE-2017-1000257 (* Security fix *)

Topics%20covered

Topics Covered

security advisory information leak critical patch Slackware curl IMAP

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 0a1acf8166ee7cf124a486ea84e59da8 curl-7.56.1-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 1a183f689d432e8e1605d1f3464cb787 curl-7.56.1-x86_64-1_slack14.0.txz
Slackware 14.1 package: f0794260c6915b74a55f974960383f30 curl-7.56.1-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: cb24ce0a88ed77e7c590c926252108d6 curl-7.56.1-x86_64-1_slack14.1.txz
Slackware 14.2 package: 08d82482f137fa0835f40b62a4b83c66 curl-7.56.1-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: acee4561dc57ae3b99e6f7d21b7b27ab curl-7.56.1-x86_64-1_slack14.2.txz
Slackware -current package: 5340f972cf3d38c14d698b4e0aeddda1 n/curl-7.56.1-i586-1.txz
Slackware x86_64 -current package: 4b4fbe96e19d3d6b07200ae66edec2ce n/curl-7.56.1-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory information leak critical patch Slackware curl IMAP

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg curl-7.56.1-i586-1_slack14.2.txz

Related News

Your message here