FEDORA-2021-7166a99f2c — security update for curl

obsolete

curl-7.79.0-4.fc35

FEDORA-2021-7166a99f2c created by kdudka 2 years ago for Fedora 35

new upstream release, which fixes the following vulnerabilities:

CVE-2021-22947 - STARTTLS protocol injection via MITM
CVE-2021-22946 - protocol downgrade required TLS bypassed
CVE-2021-22945 - use-after-free and double-free in MQTT sending

This update has been submitted for testing by kdudka.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

besser82 commented & provided feedback 2 years ago

karma

Works great! LGTM! =)

This update can be pushed to stable now if the maintainer wishes

2 years ago

This update has been obsoleted by curl-7.79.1-1.fc35.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

curl-7.79.0-4.fc35

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

BZ#2004362 CVE-2021-22945 curl: use-after-free and double-free in MQTT sending [fedora-all]

BZ#2004363 CVE-2021-22947 curl: STARTTLS protocol injection via MITM [fedora-all]

BZ#2004374 curl-7.79.0 is available

BZ#2004927 CVE-2021-22946 curl: protocol downgrade required TLS bypassed [fedora-all]

curl-7.79.0-4.fc35

Automated Test Results

passed