Stay Secure with the Latest Linux Advisories

security advisorycriticalFTP issue

Red Hat Power Tools 6.x and 7 Critical: RHBA-2000:092-01 FTP Crash Bug

Updated curl packages are available for Red Hat Power Tools 6.x and 7. . ` --------------------------------------------------------------------- Red Hat, Inc. Bug Fix Advisory Synopsis: Updated curl packages available. Advisory ID: RHBA-2000:092-01 Issue date: 2000-10-23 Updated on: 2000-10-23 Product: Red Hat Powertools Keywords: N/A Cross references: N/A --------------------------------------------------------------------- 1. Topic: Updated curl packages are available for Red Hat Power Tools 6.x and 7. 2. Relevant releases/architectures: Red Hat Powertools 6.1 - i386, alpha, sparc Red Hat Powertools 6.2 - i386, alpha, sparc Red Hat Powertools 7.0 - i386 3. Problem description: A bug in some versions of curl would cause it to incorrectly parse error responses from FTP servers. A malicious FTP server could use this bug to crash its client. 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. 5. Bug IDs fixed ( for more info): N/A 6. RPMs required: Red Hat Powertools 6.1 and 6.2: alpha: sparc: i386: sources: Red Hat Powertools 7.0: i386: sources: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- 08c579be4453f69541013144cdca36e9 6.2/SRPMS/curl-7.3-3.6.x.src.rpm bc82e6d136648cd1572c463d3cd4731d 6.2/alpha/curl-7.3-3.6.x.alpha.rpm 3e3df9b588e547669a586ddbe4dbd325 6.2/alpha/curl-devel-7.3-3.6.x.alpha.rpm e7c01e83605fc3e117f5f02ae9807109 6.2/i386/curl-7.3-3.6.x.i386.rpm 5f310ab7ee82e3461e19ce363f5654dd 6.2/i386/curl-devel-7.3-3.6.x.i386.rpm 3b56782e10342ef8cab6d877f9aa7d93 6.2/sparc/curl-7.3-3.6.x.sparc.rpm 69df2f65f5a9c719412dc047e89971a1 6.2/sparc/curl-devel-7.3-3.6.x.sparc.rpm 8df4d3ccf26b61e978d95179b6752721 7.0/SRPMS/curl-7.3-4.src.rpm 65ea31811f5c85f52843bb925f235c8b 7.0/i386/curl-7.3-4.i386.rpm 36fbdf684f3c91d7f0cff2499d28af77 7.0/i386/curl-devel-7.3-4.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: curl is at curl.se / Bugs / #26 buffer overflow in error handling Copyright(c) 2000 Red Hat, Inc. ` . Recent enhancements for Red Hat Power Tools include the latest curl modifications, addressing an FTP security flaw to bolster safety and optimize functionality.. curl update, Red Hat Power Tools, bug fix advisory, FTP issue, security patch. . LinuxSecurity.com Team

Nov 10, 2023 Red Hat