==========================================================================
Ubuntu Security Notice USN-3498-2
December 04, 2017
curl vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 12.04 ESM
Summary:
curl could be made to crash if it received specially crafted
input.
Software Description:
– curl: HTTP, HTTPS, and FTP client and client libraries
Details:
USN-3498-1 fixed a vulnerability in curl. This update provides
the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that curl incorrectly handled FTP wildcard matching.
A remote attacker could use this issue to cause curl to crash,
resulting in a denial of service, or possibly obtain sensitive
information. (CVE-2017-8817)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
curl 7.22.0-3ubuntu4.19
libcurl3 7.22.0-3ubuntu4.19
libcurl3-gnutls 7.22.0-3ubuntu4.19
libcurl3-nss 7.22.0-3ubuntu4.19
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3498-2
https://www.ubuntu.com/usn/usn-3498-1
CVE-2017-8817
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2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=FoWf
—–END PGP SIGNATURE—–
—
