jetlib.sec » Packet Storm Security Recent Files » Mandriva Linux Security Advisory 2012-058

Feeds

167787 items (5216 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db) (718 unread)
• OSVDB Vulnerabilities
• Exploit-DB (374 unread)
• SecurityFocus Vulnerabilities (1677 unread)
• Bugtraq (545 unread)
• Full Disclosure (907 unread)
• XSSed (3 unread)
• Packet Storm Security Headlines (531 unread)
• Packet Storm Security Advisories (323 unread)
• Packet Storm Security Exploits (115 unread)
• Packet Storm Security Recent Files (2 unread)
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing (11 unread)
• SecuriTeam (10 unread)
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Packet Storm Security Recent Files

• April 13, 2012
• 

  Mandriva Linux Security Advisory 2012-058

  Posted: April 13th, 2012, 3:09pm PDT

  Tags:  mandriva security linux mandriva-linux linux-security security-advisory  

  Mandriva Linux Security Advisory 2012-058 - curl is vulnerable to a SSL CBC IV vulnerability when built to use OpenSSL for the SSL/TLS layer. A work-around has been added to mitigate the problem. curl is vulnerable to a data injection attack for certain protocols through control characters embedded or percent-encoded in URLs. The updated packages have been patched to correct these issues.