Package curl: Information

  • Default inline alert: Version in the repository: 8.7.1-alt1

Binary package: curl
Version: 7.84.0-alt2
Architecture: ppc64le
Build time:  Aug 11, 2022, 12:40 PM in the task #305064
Source package: curl
Report package bug
License: MIT
Summary: Gets a file from a FTP, GOPHER or HTTP server
Description: 
Curl is a client to get documents/files from servers, using any of the
supported protocols. The command is designed to work without user
interaction or any kind of interactivity.

Curl offers a busload of useful tricks like proxy support, user
authentication, ftp upload, HTTP post, file transfer resume and more.

NOTE: This version is compiled with SSL (https) support.

Maintainer: Egor Ignatov



Last changed


Aug. 10, 2022 Egor Ignatov 7.84.0-alt2
- backport upstream fixes:
  + lib3026: reduce the number of threads to 100 (#9172)
  + easy_lock.h: include sched.h if available to fix build (#9054)
June 27, 2022 Anton Farygin 7.84.0-alt1
- 7.84.0
- Fixes:
  * CVE-2022-32208: FTP-KRB bad message verification
  * CVE-2022-32207: Unpreserved file permissions
  * CVE-2022-32206: HTTP compression denial of service
  * CVE-2022-32205: Set-Cookie denial of service
May 11, 2022 Anton Farygin 7.83.1-alt1
- 7.83.1
- Fixes:
  * CVE-2022-30115: HSTS bypass via trailing dot
  * CVE-2022-27782: TLS and SSH connection too eager reuse
  * CVE-2022-27781: CERTINFO never-ending busy-loop
  * CVE-2022-27780: percent-encoded path separator in URL host
  * CVE-2022-27779: cookie for trailing dot TLD
  * CVE-2022-27778: curl removes wrong file on error