libcurl advisories

Cantor, Scott cantor.2 at osu.edu
Wed Apr 22 10:17:27 EDT 2015


The curl project released a number of advisories today and after reviewing 
them, only one of them is really something that puts the SP at risk, but 
only through the use of invalid metadata that a trusted source oughtn't to 
let through, emphasizing the importance of never loading metadata from 
untrusted sources or without a good trust anchor.



It amounts to a strongly authenticated denial of service, so fairly low on 
the importance scale, but I'll do an updated package for RH6/7 
immediately, and queue up work to patch Windows, the latter probably 
taking a few weeks.

-- Scott



More information about the users mailing list