29 matches found
curl security update
7.19.7-26.el61.1 - do not delegate GSSAPI credentials CVE-2011-2192...
Fedora 14 : curl-7.21.0-8.fc14 (2011-8640)
do not delegate GSSAPI credentials CVE-2011-2192 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] [DSA 2271-1] curl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2271-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 02, 2011 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2271-1] curl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2271-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 02, 2011 http://www.debian.org/security/faq -...
[USN-1158-1] curl vulnerabilities
========================================================================== Ubuntu Security Notice USN-1158-1 June 24, 2011 curl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...
Security fix for the ALT Linux 6 package curl version 7.21.7-alt1
June 27, 2011 Gleb Fotengauer-Malinovskiy 7.21.7-alt1 - new version CVE-2011-2192...
Security fix for the ALT Linux 8 package curl version 7.21.7-alt1
June 27, 2011 Gleb Fotengauer-Malinovskiy 7.21.7-alt1 - new version CVE-2011-2192...
Fedora 15 : curl-7.21.3-8.fc15 (2011-8586)
do not delegate GSSAPI credentials CVE-2011-2192 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
USN-1158-1: curl vulnerabilities
Richard Silverman discovered that when doing GSSAPI authentication, libcurl unconditionally performs credential delegation, handing the server a copy of the client's security credential. CVE-2011-2192 Wesley Miaw discovered that when zlib is enabled, libcurl does not properly restrict the amount ...