Synopsis:          Low: curl security and bug fix update
Advisory ID:       SLSA-2019:1880-1
Issue Date:        2019-07-29
CVE Numbers:       CVE-2018-14618
--

The curl packages provide the libcurl library and the curl utility for
    downloading files from servers using various protocols, including HTTP,
    FTP, and LDAP.
    
    Security Fix(es):
    
    * curl: NTLM password overflow via integer overflow (CVE-2018-14618)
    
    For more details about the security issue(s), including the impact, a CVSS
    score, acknowledgments, and other related information, refer to the CVE
    page(s) listed in the References section.
    
    Bug Fix(es):
    
    * baseurl with file:// hangs and then timeout in yum repo (BZ#1709474)
    
    * curl crashes on http links with rate-limit (BZ#1711914)
--

SL7
  x86_64
    curl-7.29.0-51.el7_6.3.x86_64.rpm
    curl-debuginfo-7.29.0-51.el7_6.3.i686.rpm
    curl-debuginfo-7.29.0-51.el7_6.3.x86_64.rpm
    libcurl-7.29.0-51.el7_6.3.i686.rpm
    libcurl-7.29.0-51.el7_6.3.x86_64.rpm
    libcurl-devel-7.29.0-51.el7_6.3.i686.rpm
    libcurl-devel-7.29.0-51.el7_6.3.x86_64.rpm

- Scientific Linux Development Team