Message-ID:

"Oh what wouldn't I give to be spat at in the face..." -- a prisoner in "Life of Brian"

computers / comp.sys.tandem / ITUGLIB Update: Curl 7.84.0

ITUGLIB Update: Curl 7.84.0

<afb22cc7-73d2-4b26-88d4-ee6cac897337n@googlegroups.com>

https://www.rocksolidbbs.com/computers/article-flat.php?id=484&group=comp.sys.tandem#484

X-Received: by 2002:a7b:cb93:0:b0:3a0:4d00:2517 with SMTP id m19-20020a7bcb93000000b003a04d002517mr6451503wmi.117.1656543168303;
Wed, 29 Jun 2022 15:52:48 -0700 (PDT)
X-Received: by 2002:a81:3a08:0:b0:31c:2f56:4fee with SMTP id
h8-20020a813a08000000b0031c2f564feemr4492736ywa.449.1656543167577; Wed, 29
Jun 2022 15:52:47 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!proxad.net!feeder1-2.proxad.net!209.85.128.87.MISMATCH!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Wed, 29 Jun 2022 15:52:47 -0700 (PDT)
Injection-Info: google-groups.googlegroups.com; posting-host=2607:fea8:3fa0:4b9:ad92:9338:fabc:e8a1;
posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 2607:fea8:3fa0:4b9:ad92:9338:fabc:e8a1
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <afb22cc7-73d2-4b26-88d4-ee6cac897337n@googlegroups.com>
Subject: ITUGLIB Update: Curl 7.84.0
From: rsbecker@nexbridge.com (Randall)
Injection-Date: Wed, 29 Jun 2022 22:52:48 +0000
Content-Type: text/plain; charset="UTF-8"

by: Randall - Wed, 29 Jun 2022 22:52 UTC

Hi Everyone,

I am pleased to announce that Curl 7.84.0 is now available on the ITUGLIB website. This addresses the following CVEs:

CVE-2022-32205 (low) described at https://curl.se/docs/CVE-2022-32205.html : Set-Cookie denial of service.
CVE-2022-32206 (medium) https://curl.se/docs/CVE-2022-32206.html: HTTP compression denial of service.
CVE-2022-32207 (medium) https://curl.se/docs/CVE-2022-32207.html: Unpreserved file permissions.
CVE-2022-32208 (low) https://curl.se/docs/CVE-2022-32208.html: FTP-KRB bad message verification.

As usual, this is built for OpenSSL 3.0, 1.1.1, and 1.0.2.

Regards,
Randall Becker
On behalf of the ITUGLIB Technical Committee