[ol7_latest] libcurl-devel-7.29.0-54.0.5.el7_7.2.aarch64

Name:	libcurl-devel
Version:	7.29.0
Release:	54.0.5.el7_7.2
Architecture:	aarch64
Group:	Development/Libraries
Size:	639059
License:	MIT
RPM:	libcurl-devel-7.29.0-54.0.5.el7_7.2.aarch64.rpm
Source RPM:	curl-7.29.0-54.0.5.el7_7.2.src.rpm
Build Date:	Wed Mar 04 2020
Build Host:	ca-buildarm03.us.oracle.com
Vendor:	Oracle America
URL:	http://curl.haxx.se/
Summary:	Files needed for building applications with libcurl
Description:	The libcurl-devel package includes header files and libraries necessary for developing programs which use the libcurl library. It contains the API documentation of the library, too.

Changelog (Show File list) (Show related packages)

Wed Feb 12 2020 Lans Hung <lans.hung@oracle.com> - 7.29.0-54.0.5.el7_7.2

- Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug:30568724]

Wed Feb 05 2020 Edward Leung <edward.leung@oracle.com> - 7.29.0-54.0.3.el7_7.2

- Security Fixes [OraBug: 28939992]
- CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
- CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
- CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
- CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
- CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
- CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
- CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html)
- CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
- CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)

Wed Nov 27 2019 Kamil Dudka <kdudka@redhat.com> - 7.29.0-54.el7_7.2
```
- allow curl to POST from a char device (#1769307)
```

Mon Oct 07 2019 Kamil Dudka <kdudka@redhat.com> - 7.29.0-54.el7_7.1

- fix auth failure with duplicated WWW-Authenticate header (#1754736)

Mon Jun 03 2019 Kamil Dudka <kdudka@redhat.com> - 7.29.0-54
```
- make `curl --tlsv1` backward compatible (#1672639)
```

Mon May 27 2019 Kamil Dudka <kdudka@redhat.com> - 7.29.0-53

- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)

Fri Mar 01 2019 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52

- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)

Wed Aug 08 2018 Kamil Dudka <kdudka@redhat.com> - 7.29.0-51

- require a new enough version of nss-pem to avoid regression in yum (#1610998)

Thu Jun 07 2018 Kamil Dudka <kdudka@redhat.com> - 7.29.0-50

- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang

Wed Jun 06 2018 Kamil Dudka <kdudka@redhat.com> - 7.29.0-49
```
- make curl --speed-limit work with TFTP (#1584750)
```