Medium ELSA-2020-4599 1 CVE

Moderate: curl security and bug fix update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[7.61.1-14]
- avoid overwriting a local file with -J (CVE-2020-8177)

[7.61.1-13]
- load built-in openssl engines (#1854369)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	curl	0:7.61.1-14.el8
Oracle Linux · 8	libcurl	0:7.61.1-14.el8
Oracle Linux · 8	libcurl-devel	0:7.61.1-14.el8
Oracle Linux · 8	libcurl-minimal	0:7.61.1-14.el8

Vulnerabilities 1

High 7.8

CVE-2020-8177

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead t…

curl curl curl Debian Ubuntu Alpine

Dec 14, 2020