Synopsis

curl bug fix update

Type/Severity

Bug Fix Advisory

Topic

An updated curl package that fixes a bug is now available for Red Hat Enterprise
Linux 5.

Description

The curl package provides the libcurl library and the cURL command line tool for
transferring data using various protocols, including FTP, HTTP, Gopher, Telnet,
and DICT. Both, libcurl and cURL, support many useful capabilities, such as user
authentication, proxy support, FTP uploading, HTTP POST and PUT methods, SSL
certificates, and file transfer resume.

This updated curl package fixes the following bug:

• As a solution to a security issue, GSSAPI credential delegation was disabled,
  which broke the functionality of the applications that were relying on
  delegation, which was incorrectly enabled by libcurl. To fix this issue, the
  CURLOPT_GSSAPI_DELEGATION libcurl option has been introduced in order to enable
  delegation explicitly when applications need it. All applications using GSSAPI
  credential delegation can now use this new libcurl option to be able to run
  properly. (BZ#727884)
  

All users of cURL and libcurl are advised to upgrade to this updated package,
which resolves this issue. All running applications using libcurl have to be
restarted for the update to take an effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
curl-7.15.5-9.el5_7.4.src.rpm	SHA-256: 0d4953be556b1ba1a2b09ac4f30fac86d5625794495e2f29135b2c73f81e1a64
x86_64
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f
curl-7.15.5-9.el5_7.4.x86_64.rpm	SHA-256: a22ba59d0561e713a5396ae8519ef5a33c2e0e4200fb7bfb2af5f6537a7f6fb0
curl-devel-7.15.5-9.el5_7.4.i386.rpm	SHA-256: 0769c798acce94c1608c81c9da0c729a967e373636a6c937223decb8114fb44b
curl-devel-7.15.5-9.el5_7.4.x86_64.rpm	SHA-256: a475d9d713179db288cd22139d32ddc98cac3f05c0a76e45ea5107755e859ca8
ia64
curl-7.15.5-9.el5_7.4.ia64.rpm	SHA-256: 5e91568906d9fe728482031be071600a3f2b17855827319269ed7d9425dac556
curl-devel-7.15.5-9.el5_7.4.ia64.rpm	SHA-256: 4649ce791ad04ac1bdef9db80948ba4a2bfd6512dc2fce17691d1bfe518336d1
i386
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f
curl-devel-7.15.5-9.el5_7.4.i386.rpm	SHA-256: 0769c798acce94c1608c81c9da0c729a967e373636a6c937223decb8114fb44b

Red Hat Enterprise Linux Workstation 5

SRPM
curl-7.15.5-9.el5_7.4.src.rpm	SHA-256: 0d4953be556b1ba1a2b09ac4f30fac86d5625794495e2f29135b2c73f81e1a64
x86_64
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f
curl-7.15.5-9.el5_7.4.x86_64.rpm	SHA-256: a22ba59d0561e713a5396ae8519ef5a33c2e0e4200fb7bfb2af5f6537a7f6fb0
curl-devel-7.15.5-9.el5_7.4.i386.rpm	SHA-256: 0769c798acce94c1608c81c9da0c729a967e373636a6c937223decb8114fb44b
curl-devel-7.15.5-9.el5_7.4.x86_64.rpm	SHA-256: a475d9d713179db288cd22139d32ddc98cac3f05c0a76e45ea5107755e859ca8
i386
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f
curl-devel-7.15.5-9.el5_7.4.i386.rpm	SHA-256: 0769c798acce94c1608c81c9da0c729a967e373636a6c937223decb8114fb44b

Red Hat Enterprise Linux Desktop 5

SRPM
curl-7.15.5-9.el5_7.4.src.rpm	SHA-256: 0d4953be556b1ba1a2b09ac4f30fac86d5625794495e2f29135b2c73f81e1a64
x86_64
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f
curl-7.15.5-9.el5_7.4.x86_64.rpm	SHA-256: a22ba59d0561e713a5396ae8519ef5a33c2e0e4200fb7bfb2af5f6537a7f6fb0
i386
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
curl-7.15.5-9.el5_7.4.src.rpm	SHA-256: 0d4953be556b1ba1a2b09ac4f30fac86d5625794495e2f29135b2c73f81e1a64
s390x
curl-7.15.5-9.el5_7.4.s390.rpm	SHA-256: f1f5b8302561d5a25880c257c078a102d538233561b185ac69985de457ee4394
curl-7.15.5-9.el5_7.4.s390x.rpm	SHA-256: a00869bdca2a47f2c593a0b53313fdb63a4419f9717eb9f83643c82afb331c41
curl-devel-7.15.5-9.el5_7.4.s390.rpm	SHA-256: a32ca4cd63f9ef1d3a6288d8608b37155f7dcdda4d89643cc3e02dcba65bc3ff
curl-devel-7.15.5-9.el5_7.4.s390x.rpm	SHA-256: ab9ddf60eb80616f20fad54225bd3346b5fe39ce042a941d53b3219550a7f10f

Red Hat Enterprise Linux for Power, big endian 5

SRPM
curl-7.15.5-9.el5_7.4.src.rpm	SHA-256: 0d4953be556b1ba1a2b09ac4f30fac86d5625794495e2f29135b2c73f81e1a64
ppc
curl-7.15.5-9.el5_7.4.ppc.rpm	SHA-256: 412136ebc4f267ba93f22a3453bf9266594f20d48fec1d44f4f328a0d3cf7b5d
curl-7.15.5-9.el5_7.4.ppc64.rpm	SHA-256: 7cab283f246641f84dd57fc606ac10a305fb2b261d3a62c6cdef652a903ffce4
curl-devel-7.15.5-9.el5_7.4.ppc.rpm	SHA-256: a315c17f72d44ce5960ed35b2a07bba38bdef42924c4ea534cbc0c3b423c0b52
curl-devel-7.15.5-9.el5_7.4.ppc64.rpm	SHA-256: 80a7b1034f473285c418d5637c36d1121478609bf08c4ae9b0c0d060698a81e8

Red Hat Enterprise Linux Server from RHUI 5

SRPM
curl-7.15.5-9.el5_7.4.src.rpm	SHA-256: 0d4953be556b1ba1a2b09ac4f30fac86d5625794495e2f29135b2c73f81e1a64
x86_64
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f
curl-7.15.5-9.el5_7.4.x86_64.rpm	SHA-256: a22ba59d0561e713a5396ae8519ef5a33c2e0e4200fb7bfb2af5f6537a7f6fb0
curl-devel-7.15.5-9.el5_7.4.i386.rpm	SHA-256: 0769c798acce94c1608c81c9da0c729a967e373636a6c937223decb8114fb44b
curl-devel-7.15.5-9.el5_7.4.x86_64.rpm	SHA-256: a475d9d713179db288cd22139d32ddc98cac3f05c0a76e45ea5107755e859ca8
i386
curl-7.15.5-9.el5_7.4.i386.rpm	SHA-256: e85ff2e44684f73416d2315eb414d5edc63e875a195fb5e7f9635e61e99d657f
curl-devel-7.15.5-9.el5_7.4.i386.rpm	SHA-256: 0769c798acce94c1608c81c9da0c729a967e373636a6c937223decb8114fb44b