New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] curl (SSA:2020-232-01) New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/curl-7.72.0-i586-1_slack14.2.txz: Upgraded. This update fixes a security issue: libcurl: wrong connect-only connection [98] For more information, see: https://curl.se/docs/CVE-2020-8231.html https://www.cve.org/CVERecord?id=CVE-2020-8231 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware 14.2: Updated package for Slackware x86_64 14.2: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: 31aee2a732314bd413b5aaf33080ac88 curl-7.72.0-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 19e9dd1f05e47dba32e0ef5f1ebd4634 curl-7.72.0-x86_64-1_slack14.0.txz Slackware 14.1 package: 9d115b97a1f5a79c47ebd0505322b13d curl-7.72.0-i486-1_slack14.1.txz Slackware x86_64 14.1 package: d5d9bae33c307bd62716e3f6fa43965b curl-7.72.0-x86_64-1_slack14.1.txz Slackware 14.2 package: a99fc33b4255a92295f4dfc689d07f14 curl-7.72.0-i586-1_slack14.2.txz Slackware x86_64 14.2 package: 9a6feb52277c1456e47462dba54fb7ee curl-7.72.0-x86_64-1_slack14.2.txz Slackware -current package: 7973ec1d64cce7598d2db39a18feb493 n/curl-7.72.0-i586-1.txz Slackware x86_64 -current package: 72af835c81783bd056df6feab8299644 n/curl-7.72.0-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg curl-7.72.0-i586-1_slack14.2.txz +-----+ . The curl libraries for Slackware versions 14.0 to 14.2 have been revised due to a significant vulnerability requiring immediate downloads and patching.. curl security, libcurl update, Slackware patch. . Severity: Critical. LinuxSecurity.com Team
Moderate: curl security update. Date: Wed, 31 Mar 2010 16:58:49 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: curl on SL3.x i386/x86_64 Comments: To: "
Get the latest Linux and open source security news straight to your inbox.