Package curl: Information

  • Default inline alert: Version in the repository: 7.79.0-alt2

Source package: curl
Version: 7.51.0-alt1
Build time:  Nov 2, 2016, 02:17 PM in the task #171758
Report package bug
License: MPL or MIT
Summary: Gets a file from a FTP, GOPHER or HTTP server
Description: 
Curl is a client to get documents/files from servers, using any of the
supported protocols. The command is designed to work without user
interaction or any kind of interactivity.

Curl offers a busload of useful tricks like proxy support, user
authentication, ftp upload, HTTP post, file transfer resume and more.

NOTE: This version is compiled with SSL (https) support.

List of rpms provided by this srpm:
curl (x86_64, i586)
curl-debuginfo (x86_64, i586)
libcurl (x86_64, i586)
libcurl-debuginfo (x86_64, i586)
libcurl-devel (x86_64, i586)
libcurl-devel-static (x86_64, i586)

Maintainer: Anton Farygin


    1. libssh2-devel
    2. libssl-devel
    3. glibc-devel-static
    4. libnghttp2-devel
    5. groff-base
    6. python-modules
    7. libidn-devel
    8. zlib-devel

Last changed


Nov. 2, 2016 Anton Farygin 7.51.0-alt1
- new version with security fixes:
  CVE-2016-8615: cookie injection for other servers 
  CVE-2016-8616: case insensitive password comparison 
  CVE-2016-8617: OOB write via unchecked multiplication 
  CVE-2016-8618: double-free in curl_maprintf 
  CVE-2016-8619: double-free in krb5 code 
  CVE-2016-8620: glob parser write/read out of bounds 
  CVE-2016-8621: curl_getdate read out of bounds 
  CVE-2016-8622: URL unescape heap overflow via integer truncation 
  CVE-2016-8623: Use-after-free via shared cookies 
  CVE-2016-8624: invalid URL parsing with '#'
  CVE-2016-8625: IDNA 2003 makes curl use wrong host
Oct. 27, 2016 Vladimir D. Seleznev 7.50.3-alt2
- libcurl-devel: packaged libcurl.m4
Sept. 14, 2016 Anton Farygin 7.50.3-alt1
- new version with security fixes (CVE-2016-7167)