High ELSA-2020-5562 1 CVE

Important: curl security update (Oracle Linux 7)

Published Mar 9, 2020 · Updated Mar 9, 2020

Ecosystem: Oracle Linux

Summary

[7.29.0-54.0.5.el7_7.2]
- Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug:30568724]

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	curl	0:7.29.0-54.0.5.el7_7.2
Oracle Linux · 7	libcurl	0:7.29.0-54.0.5.el7_7.2
Oracle Linux · 7	libcurl-devel	0:7.29.0-54.0.5.el7_7.2

Vulnerabilities 1

Critical 9.8

CVE-2019-5482 EPSS 18%

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

curl curl curl gnurl Debian Ubuntu Alpine

Sep 16, 2019