Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity issue

Fedora 25: 2016-08533fc59c Moderate: Curl Negative Length Issue

- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-08533fc59c 2016-09-17 22:28:06.983094 -------------------------------------------------------------------------------- Name : curl Product : Fedora 25 Version : 7.50.3 Release : 1.fc25 URL : https://curl.se/ Summary : A utility for getting files from remote servers (FTP, HTTP, and others) Description : curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer resume, proxy tunneling and a busload of other useful tricks. -------------------------------------------------------------------------------- Update Information: - reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1375907 - CVE-2016-7167 curl: escape and unescape integer overflows [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1375907 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update curl' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora 25 has implemented a crucial update to rectify the curl negative string length vulnerability, thereby bolstering protection against potential security breaches.. Fedora Curl Security Update, Command Line Tool, Update Notification. . LinuxSecurity.com Team

Sep 17, 2016 Fedora