Issued:
2020-08-06
Updated:
2020-08-06

RHBA-2020:3348 - Bug Fix Advisory

Synopsis

curl bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for curl is now available for Red Hat Enterprise Linux 7.

Description

The curl packages provide the libcurl library and the curl utility for
downloading files from servers using various protocols, including HTTP,
FTP, and LDAP.

Bug Fix(es) and Enhancement(s):

  • POST followed by a GET with large headers on the same connection leads to

a NULL dereference (BZ#1844432)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

  • BZ - 1844432 - POST followed by a GET with large headers on the same connection leads to a NULL dereference [rhel-7.8.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 7

SRPM
curl-7.29.0-57.el7_8.1.src.rpm SHA-256: ca5b4dd4c1f45095edd8740641f0dc889f655ec975b6291aebcedffd963a584e
x86_64
curl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5811210baa968605a414d325dd7adff9fd9208a850448da0aa527557536acc3a
curl-debuginfo-7.29.0-57.el7_8.1.i686.rpm SHA-256: a54f1de5109bb89b7b8dd490bccfd5d86e46b7d99c3e092be79c4f81dfe5b5d1
curl-debuginfo-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 890a3b1d8e2f6e48f5571dc9827100b0238578c5e1fb664a9b68e17e2b6fcc6c
libcurl-7.29.0-57.el7_8.1.i686.rpm SHA-256: 5e688bec6d59e9e246f05a81284fcb1c737e62c10380787fa3d524c7029e69cd
libcurl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: cd7a8d2ee8f329b0193c5160ace2a4af11702ad68d72e797342bcb7eebc0cac6
libcurl-devel-7.29.0-57.el7_8.1.i686.rpm SHA-256: 237821b42c5ffd42e12c28ebbdbc05591ed927d08527df2cfc734fe24f2c6f76
libcurl-devel-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5555869d6a273e2abc87d86d71e82aa477ad27a4ba3d860f06866ab1ee6a472c

Red Hat Enterprise Linux Workstation 7

SRPM
curl-7.29.0-57.el7_8.1.src.rpm SHA-256: ca5b4dd4c1f45095edd8740641f0dc889f655ec975b6291aebcedffd963a584e
x86_64
curl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5811210baa968605a414d325dd7adff9fd9208a850448da0aa527557536acc3a
curl-debuginfo-7.29.0-57.el7_8.1.i686.rpm SHA-256: a54f1de5109bb89b7b8dd490bccfd5d86e46b7d99c3e092be79c4f81dfe5b5d1
curl-debuginfo-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 890a3b1d8e2f6e48f5571dc9827100b0238578c5e1fb664a9b68e17e2b6fcc6c
libcurl-7.29.0-57.el7_8.1.i686.rpm SHA-256: 5e688bec6d59e9e246f05a81284fcb1c737e62c10380787fa3d524c7029e69cd
libcurl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: cd7a8d2ee8f329b0193c5160ace2a4af11702ad68d72e797342bcb7eebc0cac6
libcurl-devel-7.29.0-57.el7_8.1.i686.rpm SHA-256: 237821b42c5ffd42e12c28ebbdbc05591ed927d08527df2cfc734fe24f2c6f76
libcurl-devel-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5555869d6a273e2abc87d86d71e82aa477ad27a4ba3d860f06866ab1ee6a472c

Red Hat Enterprise Linux Desktop 7

SRPM
curl-7.29.0-57.el7_8.1.src.rpm SHA-256: ca5b4dd4c1f45095edd8740641f0dc889f655ec975b6291aebcedffd963a584e
x86_64
curl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5811210baa968605a414d325dd7adff9fd9208a850448da0aa527557536acc3a
curl-debuginfo-7.29.0-57.el7_8.1.i686.rpm SHA-256: a54f1de5109bb89b7b8dd490bccfd5d86e46b7d99c3e092be79c4f81dfe5b5d1
curl-debuginfo-7.29.0-57.el7_8.1.i686.rpm SHA-256: a54f1de5109bb89b7b8dd490bccfd5d86e46b7d99c3e092be79c4f81dfe5b5d1
curl-debuginfo-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 890a3b1d8e2f6e48f5571dc9827100b0238578c5e1fb664a9b68e17e2b6fcc6c
curl-debuginfo-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 890a3b1d8e2f6e48f5571dc9827100b0238578c5e1fb664a9b68e17e2b6fcc6c
libcurl-7.29.0-57.el7_8.1.i686.rpm SHA-256: 5e688bec6d59e9e246f05a81284fcb1c737e62c10380787fa3d524c7029e69cd
libcurl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: cd7a8d2ee8f329b0193c5160ace2a4af11702ad68d72e797342bcb7eebc0cac6
libcurl-devel-7.29.0-57.el7_8.1.i686.rpm SHA-256: 237821b42c5ffd42e12c28ebbdbc05591ed927d08527df2cfc734fe24f2c6f76
libcurl-devel-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5555869d6a273e2abc87d86d71e82aa477ad27a4ba3d860f06866ab1ee6a472c

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
curl-7.29.0-57.el7_8.1.src.rpm SHA-256: ca5b4dd4c1f45095edd8740641f0dc889f655ec975b6291aebcedffd963a584e
s390x
curl-7.29.0-57.el7_8.1.s390x.rpm SHA-256: d5bbb0cd05dca6ada2883f2ef252dddb7b708cc3ea486f8694621e102c72cf09
curl-debuginfo-7.29.0-57.el7_8.1.s390.rpm SHA-256: f7addf9563b34541da46652399c14a6d03095022486cb57e35c09a38cbacd68a
curl-debuginfo-7.29.0-57.el7_8.1.s390x.rpm SHA-256: a942e726c2d742cb15cfe41e033fd92d66fdde0b39366a19e2a55873008cefc2
libcurl-7.29.0-57.el7_8.1.s390.rpm SHA-256: 8b2472ca4df77c43a7e92581abcf97f02a24e88afda36aefc6740c90e03b431f
libcurl-7.29.0-57.el7_8.1.s390x.rpm SHA-256: e135602b6ea4726678cbacd4b2e68775141e55fdfd05f851b7856ba95a6f7ee6
libcurl-devel-7.29.0-57.el7_8.1.s390.rpm SHA-256: 8f8a74c5ca9a5e95908360d1b5f42d8e0f958bb5b9bb0c4c55e8bfc8e39702bd
libcurl-devel-7.29.0-57.el7_8.1.s390x.rpm SHA-256: 0615326bf25b4fee5b632d36d765514f2d77ae8a38bb561054a01e77bcb6fece

Red Hat Enterprise Linux for Power, big endian 7

SRPM
curl-7.29.0-57.el7_8.1.src.rpm SHA-256: ca5b4dd4c1f45095edd8740641f0dc889f655ec975b6291aebcedffd963a584e
ppc64
curl-7.29.0-57.el7_8.1.ppc64.rpm SHA-256: 5e26f5a97bdc6f02edd1e306b277ee859c979f9e109ca1b48a829b97e8795cef
curl-debuginfo-7.29.0-57.el7_8.1.ppc.rpm SHA-256: 607bd0cc09c0878a964b0952bb91b1552076ac5a7fc2dc854194cdef54a2d590
curl-debuginfo-7.29.0-57.el7_8.1.ppc64.rpm SHA-256: 1f59082eaca9e0f9b5c433651aace10b0c505433efc7637b38bb81f32c93d3c3
libcurl-7.29.0-57.el7_8.1.ppc.rpm SHA-256: c995f4f76142c7d7bc7803e181ed6ec7347c8410a9cb11e792d1bcb311f51540
libcurl-7.29.0-57.el7_8.1.ppc64.rpm SHA-256: 375df8beba637f0000b01dbc13056f53c772d6442ad301b7317daa18bc8a7975
libcurl-devel-7.29.0-57.el7_8.1.ppc.rpm SHA-256: 9a9b6a239fd5635fd9e82b0746c2aa544c5369a531fb2a139d58a8acdaa16f71
libcurl-devel-7.29.0-57.el7_8.1.ppc64.rpm SHA-256: 2bfb71d8b0def647bdd44ff1aed6b630c120635224d7a80f9e9c53a299ddca2a

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
curl-7.29.0-57.el7_8.1.src.rpm SHA-256: ca5b4dd4c1f45095edd8740641f0dc889f655ec975b6291aebcedffd963a584e
x86_64
curl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5811210baa968605a414d325dd7adff9fd9208a850448da0aa527557536acc3a
curl-debuginfo-7.29.0-57.el7_8.1.i686.rpm SHA-256: a54f1de5109bb89b7b8dd490bccfd5d86e46b7d99c3e092be79c4f81dfe5b5d1
curl-debuginfo-7.29.0-57.el7_8.1.i686.rpm SHA-256: a54f1de5109bb89b7b8dd490bccfd5d86e46b7d99c3e092be79c4f81dfe5b5d1
curl-debuginfo-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 890a3b1d8e2f6e48f5571dc9827100b0238578c5e1fb664a9b68e17e2b6fcc6c
curl-debuginfo-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 890a3b1d8e2f6e48f5571dc9827100b0238578c5e1fb664a9b68e17e2b6fcc6c
libcurl-7.29.0-57.el7_8.1.i686.rpm SHA-256: 5e688bec6d59e9e246f05a81284fcb1c737e62c10380787fa3d524c7029e69cd
libcurl-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: cd7a8d2ee8f329b0193c5160ace2a4af11702ad68d72e797342bcb7eebc0cac6
libcurl-devel-7.29.0-57.el7_8.1.i686.rpm SHA-256: 237821b42c5ffd42e12c28ebbdbc05591ed927d08527df2cfc734fe24f2c6f76
libcurl-devel-7.29.0-57.el7_8.1.x86_64.rpm SHA-256: 5555869d6a273e2abc87d86d71e82aa477ad27a4ba3d860f06866ab1ee6a472c

Red Hat Enterprise Linux for Power, little endian 7

SRPM
curl-7.29.0-57.el7_8.1.src.rpm SHA-256: ca5b4dd4c1f45095edd8740641f0dc889f655ec975b6291aebcedffd963a584e
ppc64le
curl-7.29.0-57.el7_8.1.ppc64le.rpm SHA-256: 14159c6bb6fa5f16debdcf4a1e6cba73c954896ae0eed32a49fce9c691c2c530
curl-debuginfo-7.29.0-57.el7_8.1.ppc64le.rpm SHA-256: fecfc9cd5531854bbf9a8087598f63fa78dc6fdfd16bd1070f1ad9844a404f8a
libcurl-7.29.0-57.el7_8.1.ppc64le.rpm SHA-256: f9f7079425df1e9e0bb3a9ce8e65d96969f553297df712cead8e896ae376c1b8
libcurl-devel-7.29.0-57.el7_8.1.ppc64le.rpm SHA-256: 6067c89327e83baa774521d8314efe70bdaef85bc586df79b69c0ff05370c31b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.