Lucene search
OracleLinuxELSA-2018-3157HistoryNov 05, 2018 - 12:00 a.m.
curl and nss-pem security and bug fix update
2018-11-0500:00:00
linux.oracle.com
520
EPSS
0.009
Percentile
83.0%
curl
[7.29.0-51]
- require a new enough version of nss-pem to avoid regression in yum (#1610998)
[7.29.0-50] - remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang
[7.29.0-49] - make curl --speed-limit work with TFTP (#1584750)
[7.29.0-48] - fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)
[7.29.0-47] - make NSS deallocate PKCS #11 objects early enough (#1510247)
nss-pem
[1.0.3-5] - update object ID while reusing a certificate (#1610998)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | curl | < 7.29.0-51.el7 | curl-7.29.0-51.el7.src.rpm |
| oracle linux | 7 | src | nss-pem | < 1.0.3-5.el7 | nss-pem-1.0.3-5.el7.src.rpm |
| oracle linux | 7 | aarch64 | curl | < 7.29.0-51.el7 | curl-7.29.0-51.el7.aarch64.rpm |
| oracle linux | 7 | aarch64 | libcurl | < 7.29.0-51.el7 | libcurl-7.29.0-51.el7.aarch64.rpm |
| oracle linux | 7 | aarch64 | libcurl-devel | < 7.29.0-51.el7 | libcurl-devel-7.29.0-51.el7.aarch64.rpm |
| oracle linux | 7 | aarch64 | nss-pem | < 1.0.3-5.el7 | nss-pem-1.0.3-5.el7.aarch64.rpm |
| oracle linux | 7 | src | curl | < 7.29.0-51.el7 | curl-7.29.0-51.el7.src.rpm |
| oracle linux | 7 | src | nss-pem | < 1.0.3-5.el7 | nss-pem-1.0.3-5.el7.src.rpm |
| oracle linux | 7 | x86_64 | curl | < 7.29.0-51.el7 | curl-7.29.0-51.el7.x86_64.rpm |
| oracle linux | 7 | i686 | libcurl | < 7.29.0-51.el7 | libcurl-7.29.0-51.el7.i686.rpm |
Related
nessus
nessus
RHEL 7 : curl and nss-pem (RHSA-2018:3157)
2018-10-31 00:00:00
NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Multiple Vulnerabilities (NS-SA-2019-0039)
2019-08-12 00:00:00
Oracle Linux 7 : curl / nss-pem (ELSA-2018-3157)
2018-11-07 00:00:00
amazon
amazon
ibm
ibm
redhat
redhat
(RHSA-2020:0594) Moderate: curl security update
2020-02-25 11:32:48
(RHSA-2018:3157) Moderate: curl and nss-pem security and bug fix update
2018-10-30 04:24:21
(RHSA-2020:0544) Moderate: curl security update
2020-02-18 13:56:21
centos
centos
curl, libcurl, nss security update
2018-11-15 18:44:09
ubuntu
ubuntu
curl vulnerabilities
2018-05-24 00:00:00
curl vulnerabilities
2018-03-15 00:00:00
curl vulnerability
2018-02-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3598-2)
2022-08-26 00:00:00
Fedora Update for curl FEDORA-2018-8877b4ccac
2018-03-21 00:00:00
Debian: Security Advisory (DSA-4136-1)
2018-03-13 00:00:00
cloudfoundry
cloudfoundry
USN-3598-1: curl vulnerabilities | Cloud Foundry
2018-04-04 00:00:00
debian
debian
[SECURITY] [DSA 4136-1] curl security update
2018-03-14 21:36:51
[SECURITY] [DLA 1309-1] curl security update
2018-03-18 21:22:09
[SECURITY] [DSA 4202-1] curl security update
2018-05-16 20:14:47
archlinux
archlinux
[ASA-201803-16] lib32-curl: multiple issues
2018-03-19 00:00:00
[ASA-201803-17] libcurl-compat: multiple issues
2018-03-19 00:00:00
[ASA-201803-15] curl: multiple issues
2018-03-19 00:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2018-04-08 00:00:00
cURL: Multiple vulnerabilities
2018-06-19 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: curl-7.55.1-10.fc27
2018-03-20 18:26:44
[SECURITY] Fedora 26 Update: curl-7.53.1-16.fc26
2018-03-20 17:38:42
[SECURITY] Fedora 28 Update: curl-7.59.0-2.fc28
2018-03-30 13:33:07
osv
osv
curl - security update
2018-03-18 00:00:00
curl - security update
2018-03-14 00:00:00
curl - security update
2018-05-16 00:00:00
slackware
slackware
[slackware-security] curl
2018-03-16 04:18:28
[slackware-security] curl
2018-05-17 04:13:54
photon
photon
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.59.0-alt1
2018-03-31 00:00:00
Security fix for the ALT Linux 8 package curl version 7.60.0-alt1
2018-05-16 00:00:00
Security fix for the ALT Linux 8 package curl version 7.58.0-alt1
2018-01-24 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2018-10-30 21:01:43
nvd
nvd
CVE-2018-1000301
2018-05-24 13:29:01
CVE-2018-1000121
2018-03-14 18:29:00
CVE-2018-1000122
2018-03-14 18:29:00
debiancve
debiancve
CVE-2018-1000121
2018-03-14 18:29:00
CVE-2018-1000122
2018-03-14 18:29:00
CVE-2018-1000120
2018-03-14 18:29:00
veracode
veracode
Denial Of Service (DoS)
2019-05-16 03:19:16
Buffer Overread
2018-05-28 07:06:06
Denial Of Service (DoS)
2018-07-17 04:59:31
cve
cve
CVE-2018-1000120
2018-03-14 18:29:00
CVE-2018-1000122
2018-03-14 18:29:00
CVE-2018-1000121
2018-03-14 18:29:00
cvelist
cvelist
CVE-2018-1000121
2018-03-14 18:00:00
CVE-2018-1000122
2018-03-14 18:00:00
CVE-2018-1000120
2018-03-14 18:00:00
ubuntucve
ubuntucve
CVE-2018-1000121
2018-03-14 00:00:00
CVE-2018-1000120
2018-03-14 00:00:00
CVE-2018-1000122
2018-03-14 00:00:00
prion
prion
Buffer overflow
2018-03-14 18:29:00
Null pointer dereference
2018-03-14 18:29:00
Buffer overflow
2018-03-14 18:29:00
f5
f5
K22052524 : cURL and libcurl vulnerability CVE-2018-1000120
2018-04-13 00:00:00
redhatcve
redhatcve
CVE-2018-1000120
2018-03-14 07:49:14
CVE-2018-1000122
2018-03-14 07:49:32
CVE-2018-1000121
2018-03-14 07:48:55
github
github
curl FTP path confusion leads to NIL byte out of bounds write
2022-05-14 00:58:02
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-02 17:52:45
alpinelinux
alpinelinux
CVE-2018-1000121
2018-03-14 18:29:00
CVE-2018-1000301
2018-05-24 13:29:01
CVE-2018-1000122
2018-03-14 18:29:00
hackerone
hackerone
curl: Proxy-Authorization header carried to a new host on a redirect
2021-01-25 02:37:39
freebsd
freebsd
cURL -- Multiple vulnerabilities
2018-01-24 00:00:00
suse
suse
Security update for curl (moderate)
2018-05-18 18:07:02
Security update for curl (moderate)
2018-06-09 15:09:49
symantec
symantec
cURL/libcURL CVE-2018-1000007 Information Disclosure Vulnerability
2018-01-24 00:00:00