Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Slackware: 2020-232-01 Critical: curl libcurl Connection Issue

slackware
Calendar Grey August 19, 2020
Dist Slackware Esm H88
The curl libraries for Slackware versions 14.0 to 14.2 have been revised due to a significant vulnerability requiring immediate downloads and patching.
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.72.0-i586-1_slack14.2.txz: Upgraded. This update fixes a security issue: libcurl: wrong connect-only connection [98] For more information, see: https://curl.se/docs/CVE-2020-8231.html https://www.cve.org/CVERecord?id=CVE-2020-8231 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 31aee2a732314bd413b5aaf33080ac88 curl-7.72.0-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 19e9dd1f05e47dba32e0ef5f1ebd4634 curl-7.72.0-x86_64-1_slack14.0.txz
Slackware 14.1 package: 9d115b97a1f5a79c47ebd0505322b13d curl-7.72.0-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: d5d9bae33c307bd62716e3f6fa43965b curl-7.72.0-x86_64-1_slack14.1.txz
Slackware 14.2 package: a99fc33b4255a92295f4dfc689d07f14 curl-7.72.0-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 9a6feb52277c1456e47462dba54fb7ee curl-7.72.0-x86_64-1_slack14.2.txz
Slackware -current package: 7973ec1d64cce7598d2db39a18feb493 n/curl-7.72.0-i586-1.txz
Slackware x86_64 -current package: 72af835c81783bd056df6feab8299644 n/curl-7.72.0-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg curl-7.72.0-i586-1_slack14.2.txz

Related News

Your message here