A new update is available for Fedora Core - [SECURITY] Fedora Core 3 Update: curl-7.12.3-4.fc3. Here the announcement:
Fedora Update Notification
FEDORA-2005-1000
2005-10-18
---------------------------------------------------------------------
Product : Fedora Core 3
Name : curl
Version : 7.12.3
Release : 4.fc3
Summary : A utility for getting files from remote servers (FTP, HTTP, and others).
Description :
cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
Dict servers, using any of the supported protocols. cURL is designed
to work without user interaction or any kind of interactivity. cURL
offers many useful capabilities, like proxy support, user
authentication, FTP upload, HTTP post, and file transfer resume.
---------------------------------------------------------------------
Update Information:
This package fixes a buffer overflow bug in NTLM
authentication code of curl (CAN-2005-3185).
---------------------------------------------------------------------
* Tue Oct 18 2005 Ivana Varekova <varekova@redhat.com> 7.12.3.4.fc3
- fix bug 170682 CAN-2005-3185 NTLM buffer overflow
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
cfe56d0b45d31bafe71f166360931eb8 SRPMS/curl-7.12.3-4.fc3.src.rpm
0cbeb4c1f65e1cf21992cdda8cd78134 x86_64/curl-7.12.3-4.fc3.x86_64.rpm
39e0ff077a453a7a7869f0027286f988 x86_64/curl-devel-7.12.3-4.fc3.x86_64.rpm
9c31f946e0821befba9c2e52fbf4868d x86_64/debug/curl-debuginfo-7.12.3-4.fc3.x86_64.rpm
723a4786b312c859cf627c7a64f1035e x86_64/curl-7.12.3-4.fc3.i386.rpm
723a4786b312c859cf627c7a64f1035e i386/curl-7.12.3-4.fc3.i386.rpm
a235e0390394f3647649e3aa821ea0d0 i386/curl-devel-7.12.3-4.fc3.i386.rpm
a0601fce1eea8b5fcf0702985b86eda8 i386/debug/curl-debuginfo-7.12.3-4.fc3.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
