Fedora 26 : curl (2017-f1ffd18079)

Security fixes for CVE-2017-1000100 and CVE-2017-1000101 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Security fix for the ALT Linux 8 package curl version 7.55.0-alt1

Aug. 9, 2017 Anton Farygin 7.55.0-alt1 - new version with following security fixes: CVE-2017-1000101 glob: do not parse after a strtoul overflow range CVE-2017-1000100 tftp: reject file name lengths that don't fit CVE-2017-1000099 file: output the correct buffer to the user...

CVE-2016-1000100

...

CVE-2016-1000100

CVE-2016-1000100 is a duplicate of CVE-2016-5385 (httpoxy). The connected docs show CVE-2016-5385 describing PHP’s HTTP_PROXY namespace clash in CGI-like environments, allowing an attacker to redirect outgoing HTTP requests via a crafted Proxy header. Affected PHP versions include up to 7.0.8; mi...