Package curl: Information

Source package: curl
Version: 7.87.0-alt1
Version in the repository: 8.3.0-alt1
Build time:  Dec 21, 2022, 06:40 PM
Report package bug
License: MIT
Summary: Gets a file from a FTP, GOPHER or HTTP server
Curl is a client to get documents/files from servers, using any of the
supported protocols. The command is designed to work without user
interaction or any kind of interactivity.

Curl offers a busload of useful tricks like proxy support, user
authentication, ftp upload, HTTP post, file transfer resume and more.

NOTE: This version is compiled with SSL (https) support.

List of rpms provided by this srpm:
curl (e2kv6, e2kv5, e2kv4, e2k)
curl-debuginfo (e2kv6, e2kv5, e2kv4, e2k)
libcurl (e2kv6, e2kv5, e2kv4, e2k)
libcurl-debuginfo (e2kv6, e2kv5, e2kv4, e2k)
libcurl-devel (e2kv6, e2kv5, e2kv4, e2k)
libcurl-devel-static (e2kv6, e2kv5, e2kv4, e2k)

Maintainer: Anton Farygin

    1. libldap-devel
    2. libnghttp2-devel
    3. libnghttp2-tools
    4. libbrotli-devel
    5. libpsl-devel
    6. glibc-devel-static
    7. libssh2-devel
    8. groff-base
    9. libssl-devel
    10. python3-base
    11. zlib-devel
    12. libidn2-devel
    13. libkrb5-devel

Last changed

Dec. 21, 2022 Anton Farygin 7.87.0-alt1
- 7.86.0 -> 7.87.0
- Fixes:
  * CVE-2022-43551: Another HSTS bypass via IDN
  * CVE-2022-43552: HTTP Proxy deny use-after-free
Oct. 26, 2022 Anton Farygin 7.86.0-alt1
- 7.85.0 -> 7.86.0
- Fixes:
  * CVE-2022-32221: POST following PUT confusion
  * CVE-2022-35260: .netrc parser out-of-bounds access
  * CVE-2022-42915: HTTP proxy double-free
  * CVE-2022-42916: HSTS bypass via IDN
Aug. 31, 2022 Anton Farygin 7.85.0-alt1
- 7.84.0 -> 7.85.0
- Fixes:
  * CVE-2022-35252: control code in cookie denial of service