rpms/curl
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Resolves: CVE-2020-8285 - libcurl: FTP wildcard stack overflow

Browse Source
This commit is contained in:
Kamil Dudka 2020-12-09 11:42:53 +01:00
parent aa87f54d87
commit a52387704a
2 changed files with 1869 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1864
0006-curl-7.71.1-CVE-2020-8285.patch Normal file
View File

File diff suppressed because it is too large Load Diff

5
curl.spec
View File

@ -17,6 +17,9 @@ Patch4: 0004-curl-7.71.1-CVE-2020-8231.patch
# curl: trusting FTP PASV responses (CVE-2020-8284) # curl: trusting FTP PASV responses (CVE-2020-8284)
Patch5: 0005-curl-7.71.1-CVE-2020-8284.patch Patch5: 0005-curl-7.71.1-CVE-2020-8284.patch
# libcurl: FTP wildcard stack overflow (CVE-2020-8285)
Patch6: 0006-curl-7.71.1-CVE-2020-8285.patch
# patch making libcurl multilib ready # patch making libcurl multilib ready
Patch101: 0101-curl-7.32.0-multilib.patch Patch101: 0101-curl-7.32.0-multilib.patch
@ -188,6 +191,7 @@ be installed.
%patch2 -p1 %patch2 -p1
%patch4 -p1 %patch4 -p1
%patch5 -p1 %patch5 -p1
%patch6 -p1
# Fedora patches # Fedora patches
%patch101 -p1 %patch101 -p1
@ -367,6 +371,7 @@ rm -f ${RPM_BUILD_ROOT}%{_libdir}/libcurl.la
%changelog %changelog
* Wed Dec 09 2020 Kamil Dudka <kdudka@redhat.com> - 7.71.1-8 * Wed Dec 09 2020 Kamil Dudka <kdudka@redhat.com> - 7.71.1-8
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284) - curl: trusting FTP PASV responses (CVE-2020-8284)
* Thu Sep 10 2020 Jinoh Kang <aurhb20@protonmail.ch> - 7.71.1-7 * Thu Sep 10 2020 Jinoh Kang <aurhb20@protonmail.ch> - 7.71.1-7