Lucene search

K
redhatRedHatRHSA-2020:5417
HistoryDec 15, 2020 - 8:07 a.m.

(RHSA-2020:5417) Moderate: curl security and bug fix update

2020-12-1508:07:44
access.redhat.com
47

0.001 Low

EPSS

Percentile

41.4%

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

  • curl: Incorrect argument check can allow remote servers to overwrite local files (CVE-2020-8177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • libcurl: Segfault when HTTPS_PROXY and NO_PROXY is used together (BZ#1900103)