Name: | libcurl |
---|---|
Version: | 7.76.1 |
Release: | 31.el9 |
Architecture: | x86_64 |
Group: | Unspecified |
Size: | 667622 |
License: | MIT |
RPM: | libcurl-7.76.1-31.el9.x86_64.rpm |
Source RPM: | curl-7.76.1-31.el9.src.rpm |
Build Date: | Sun Oct 27 2024 |
Build Host: | build-ol9-x86_64.oracle.com |
Vendor: | Oracle America |
URL: | https://curl.se/ |
Summary: | A library for getting files from web servers |
Description: | libcurl is a free and easy-to-use client-side URL transfer library, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. libcurl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, Kerberos4), file transfer resume, http proxy tunneling and more. |
- provide common cleanup method for push headers (CVE-2024-2398)
- ignore unexpected EOF (RHEL-39995)
- rebuild for 9.4 GA
- return error if hostname too long for remote resolve (CVE-2023-38545) - fix cookie injection with none file (CVE-2023-38546) - cap SFTP packet size sent (RHEL-14697) - lowercase the domain names before PSL checks (CVE-2023-46218)
- when keyboard-interactive auth fails, try password (#2229800)
- unify the upload/method handling (CVE-2023-28322) - fix host name wildcard checking (CVE-2023-28321)
- adapt the fix of CVE-2023-27535 for RHEL 9 curl
- fix SSH connection too eager reuse still (CVE-2023-27538) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix SFTP path ~ resolving discrepancy (CVE-2023-27534) - fix TELNET option IAC injection (CVE-2023-27533)
- fix HTTP multi-header compression denial of service (CVE-2023-23916)
- smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)