Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Slackware 14.x: 2020-344-01 Moderate Curl Security Issues

slackware
Calendar Grey December 9, 2020
Dist Slackware Esm H88
Recent curl updates address critical vulnerabilities for Slackware users spanning various releases. Prompt upgrade advised.
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.74.0-i586-1_slack14.2.txz: Upgraded. This release includes the following security related bugfixes: Inferior OCSP verification [93] FTP wildcard stack overflow [95] Trusting FTP PASV responses [97] For more information, see: https://www.cve.org/CVERecord?id=CVE-2020-8286 https://www.cve.org/CVERecord?id=CVE-2020-8285 https://www.cve.org/CVERecord?id=CVE-2020-8284 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 06a63eeec2a9fd5fed4a76eda3c7751a curl-7.74.0-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 81d040e2e3b708bccd7a40d3f24ea2c0 curl-7.74.0-x86_64-1_slack14.0.txz
Slackware 14.1 package: aadc0237d637fcd3893ed5e93ee23806 curl-7.74.0-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 01cf380a4bf895fb723e6301883264b7 curl-7.74.0-x86_64-1_slack14.1.txz
Slackware 14.2 package: d5d8260c0b5927d79dc013e04f81c81c curl-7.74.0-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 8b7d6ad9f15b5ec6020bd07d94f2afc2 curl-7.74.0-x86_64-1_slack14.2.txz
Slackware -current package: 6b0d48b4a33ae2911650b41ea8ccc9ed n/curl-7.73.0-i586-1.txz
Slackware x86_64 -current package: 07fe0b18000d2b3706d3d22262107d9d n/curl-7.74.0-x86_64-1.txz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg curl-7.74.0-i586-1_slack14.2.txz

Related News

Your message here