hemu312/curl
1
0
Fork 0
forked from rpms/curl
Code Pull Requests Activity

Related: CVE-2022-27774 - add missing tests to Makefile

Browse Source
This commit is contained in:
Kamil Dudka 2022-04-29 14:08:10 +02:00
parent fa64a61826
commit 858e381746
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
0013-curl-7.76.1-CVE-2022-27774.patch
View File

@ -163,7 +163,7 @@ index 7ae2cf8..175fc43 100644
test945 test946 test947 test948 test949 test950 test951 test952 test953 \ test945 test946 test947 test948 test949 test950 test951 test952 test953 \
test954 test955 test956 test957 test958 test959 test960 test961 test962 \ test954 test955 test956 test957 test958 test959 test960 test961 test962 \
test963 test964 test965 test966 test967 test968 test969 test970 test971 \ test963 test964 test965 test966 test967 test968 test969 test970 test971 \
+test976 \ +test973 test974 test975 test976 \
\ \
test980 test981 test982 test983 test984 test985 test986 \ test980 test981 test982 test983 test984 test985 test986 \
\ \

5
curl.spec
View File

@ -1,7 +1,7 @@
Summary: A utility for getting files from remote servers (FTP, HTTP, and others) Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
Name: curl Name: curl
Version: 7.76.1 Version: 7.76.1
Release: 15%{?dist} Release: 16%{?dist}
License: MIT License: MIT
Source: https://curl.se/download/%{name}-%{version}.tar.xz Source: https://curl.se/download/%{name}-%{version}.tar.xz
@ -452,6 +452,9 @@ rm -f ${RPM_BUILD_ROOT}%{_libdir}/libcurl.la
%{_libdir}/libcurl.so.4.[0-9].[0-9].minimal %{_libdir}/libcurl.so.4.[0-9].[0-9].minimal
%changelog %changelog
* Fri Apr 29 2022 Kamil Dudka <kdudka@redhat.com> - 7.76.1-16
- add missing tests to Makefile
* Thu Apr 28 2022 Kamil Dudka <kdudka@redhat.com> - 7.76.1-15 * Thu Apr 28 2022 Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
- fix credential leak on redirect (CVE-2022-27774) - fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776) - fix auth/cookie leak on redirect (CVE-2022-27776)