libcurl advisories
Cantor, Scott
cantor.2 at osu.edu
Wed Apr 22 10:17:27 EDT 2015
The curl project released a number of advisories today and after reviewing
them, only one of them is really something that puts the SP at risk, but
only through the use of invalid metadata that a trusted source oughtn't to
let through, emphasizing the importance of never loading metadata from
untrusted sources or without a good trust anchor.
It amounts to a strongly authenticated denial of service, so fairly low on
the importance scale, but I'll do an updated package for RH6/7
immediately, and queue up work to patch Windows, the latter probably
taking a few weeks.
-- Scott
More information about the users
mailing list