sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] SECURITY UPDATE for ftp/curl

From: Seth Alan Woolley <seth AT positivism.org>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] SECURITY UPDATE for ftp/curl
Date: Mon, 21 Feb 2005 17:14:40 -0800

The following files are attached for spell ftp/curl:
BUILD
DEPENDS
DETAILS
HISTORY
http-ntlm.patch
SECURITY

* DETAILS: updated UPDATED for SECURITY FIX.
NTLM and KRB4 vulns. NTLM fixed, KRB4 disabled.
* BUILD: added to patch for the above problems.
* http-ntlm.patch: added for NTLM fix.
* SECURITY: added because vendor didn't respond to security vulns.

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id 00BA3AF3 = 8BE0 A72E A47E A92A 0737 F2FF 7A3F 6D3C 00BA 3AF3
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0x00BA3AF3
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.9242.tar.bz2
Description: Binary data

Attachment: pgps6nSVo3T_u.pgp
Description: PGP signature

[SM-Security] SECURITY UPDATE for ftp/curl, Seth Alan Woolley, 02/21/2005