From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <rider@altlinux.com>
Message-ID: <4694A2A8.7030909@altlinux.com>
Date: Wed, 11 Jul 2007 13:28:08 +0400
From: Anton Farygin <rider@altlinux.com>
User-Agent: Thunderbird 2.0.0.0 (X11/20070423)
MIME-Version: 1.0
To: ALT Devel discussion list <devel@lists.altlinux.org>
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 8bit
Subject: [devel] curl CVE-2007-3564
X-BeenThere: devel@lists.altlinux.org
X-Mailman-Version: 2.1.9rc1
Precedence: list
Reply-To: ALT Devel discussion list <devel@lists.altlinux.org>
List-Id: ALT Devel discussion list <devel.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/devel>,
	<mailto:devel-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/devel>
List-Post: <mailto:devel@lists.altlinux.org>
List-Help: <mailto:devel-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/devel>,
	<mailto:devel-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jul 2007 09:28:14 -0000
Archived-At: <http://lore.altlinux.org/devel/4694A2A8.7030909@altlinux.com/>
List-Archive: <http://lore.altlinux.org/devel/>
List-Post: <mailto:devel@altlinux.org>

В Sisyphus отправляется curl версии 7.16.4 с исправленным CVE-2007-3564.

Правда наш CURL не подвержен данной проблеме, т.к. собран с внешним openssl.

Но для успокоения общественности просьба переложить новую версию в 
branch/4.0

Подробнее про проблему: http://curl.haxx.se/docs/adv_20070710.html

Rgds,
Rider