curl-minimal-7.85.0-11.fc37 in Fedora 37

↵ Return to the main page of curl-minimal
View build
Search for updates

Package Info (Data from x86_64 build)
🠗 Changelog
🠗 Dependencies
🠗 Provides
🠗 Files

Changelog

Date	Author	Change
2023-09-13	Jan Macku <jamacku at redhat dot com> - 7.85.0-11	- fix HTTP headers eat all memory (CVE-2023-38039) - temporarily disable test 678 on aarch64 (it suddently started crashing without any change in curl)
2023-07-20	Jan Macku <jamacku at redhat dot com> - 7.85.0-10	- fix fopen race condition (CVE-2023-32001)
2023-06-05	Jan Macku <jamacku at redhat dot com> - 7.85.0-9	- fix more POST-after-PUT confusion (CVE-2023-28322) - fix IDN wildcard match (CVE-2023-28321)
2023-03-24	Kamil Dudka <kdudka at redhat dot com> - 7.85.0-8	- fix SSH connection too eager reuse still (CVE-2023-27538) - fix HSTS double-free (CVE-2023-27537) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix SFTP path ~ resolving discrepancy (CVE-2023-27534) - fix TELNET option IAC injection (CVE-2023-27533)
2023-02-27	Kamil Dudka <kdudka at redhat dot com> - 7.85.0-7	- header: define public API functions as extern C (#2173299)
2023-02-15	Kamil Dudka <kdudka at redhat dot com> - 7.85.0-6	- fix HTTP multi-header compression denial of service (CVE-2023-23916) - share HSTS between handles (CVE-2023-23915 CVE-2023-23914)
2022-12-21	Kamil Dudka <kdudka at redhat dot com> - 7.85.0-5	- smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - http: use the IDN decoded name in HSTS checks (CVE-2022-43551)
2022-11-24	Kamil Dudka <kdudka at redhat dot com> - 7.85.0-4	- enforce versioned libnghttp2 dependency for libcurl (#2144277)
2022-11-21	Kamil Dudka <kdudka at redhat dot com> - 7.85.0-3	- http2: make nghttp2 less picky about field whitespace (#2144277)
2022-10-26	Kamil Dudka <kdudka at redhat dot com> - 7.85.0-2	- url: use IDN decoded names for HSTS checks (CVE-2022-42916) - http_proxy: restore the protocol pointer on error (CVE-2022-42915) - netrc: replace fgets with Curl_get_line (CVE-2022-35260) - fix POST following PUT confusion (CVE-2022-32221)

Dependencies

glibc
libcurl >= 7.85.0-11.fc37
libcurl-minimal >= 7.85.0-11.fc37

Provides

curl
curl-minimal
curl-minimal(x86-64)

Files

usr/
- bin/
  - curl
- lib/
  - .build-id/
    - d8/
      - 3ca093ef371c26825eb129e7213424d4682d64
- share/
  - man/
    - man1/
      - curl.1.gz

Sources on Pagure