This is a multi-part message in MIME format...

------------=_1129261965-811-1058

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

                Mandriva Linux Security Update Advisory
 _______________________________________________________________________

 Package name:           curl
 Advisory ID:            MDKSA-2005:182
 Date:                   October 13th, 2005

 Affected versions:	 10.1, 10.2, 2006.0, Corporate 3.0,
			 Multi Network Firewall 2.0
 ______________________________________________________________________

 Problem Description:

 A vulnerability in libcurl's NTLM function can overflow a stack-based
 buffer if given too long a user name or domain name in NTLM
 authentication is enabled and either a) pass a user and domain name to
 libcurl that together are longer than 192 bytes or b) allow (lib)curl
 to follow HTTP redirects and the new URL contains a URL with a user and
 domain name that together are longer than 192 bytes.
 
 The updated packages have been patched to address this issue.
 _______________________________________________________________________

 References:

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-3185
  http://curl.haxx.se/mail/lib-2005-10/0061.html
 ______________________________________________________________________

 Updated Packages:
  
 Mandrivalinux 10.1:
 f03596cfd096487930950f055113e25e  10.1/RPMS/curl-7.12.1-1.2.101mdk.i586.rpm
 888d28bd88686516b965801d4fa73ef5 
 10.1/RPMS/libcurl3-7.12.1-1.2.101mdk.i586.rpm
 14119a5933519cd326eab4b6912f9c89 
 10.1/RPMS/libcurl3-devel-7.12.1-1.2.101mdk.i586.rpm
 95e5c325854b56bcc049ace852aacad9  10.1/SRPMS/curl-7.12.1-1.2.101mdk.src.rpm

 Mandrivalinux 10.1/X86_64:
 c8672912f86bbb916d12e9e1868230eb 
 x86_64/10.1/RPMS/curl-7.12.1-1.2.101mdk.x86_64.rpm
 bd80d2720507b859b8da2df5f67fbf6a 
 x86_64/10.1/RPMS/lib64curl3-7.12.1-1.2.101mdk.x86_64.rpm
 62e47838707d23ccf8e55c495458aaa6 
 x86_64/10.1/RPMS/lib64curl3-devel-7.12.1-1.2.101mdk.x86_64.rpm
 95e5c325854b56bcc049ace852aacad9 
 x86_64/10.1/SRPMS/curl-7.12.1-1.2.101mdk.src.rpm

 Mandrivalinux 10.2:
 02917ae6640125c7fd60dfe1d4c435af  10.2/RPMS/curl-7.13.1-2.1.102mdk.i586.rpm
 2547b81f7043b55a0b346e74817d5664 
 10.2/RPMS/libcurl3-7.13.1-2.1.102mdk.i586.rpm
 b1f52fa823b34b43cb925cef0f4ca554 
 10.2/RPMS/libcurl3-devel-7.13.1-2.1.102mdk.i586.rpm
 853ad6f024fe5247d8e97c081c854476  10.2/SRPMS/curl-7.13.1-2.1.102mdk.src.rpm

 Mandrivalinux 10.2/X86_64:
 30c2447b5a8066da44547f30e8693aed 
 x86_64/10.2/RPMS/curl-7.13.1-2.1.102mdk.x86_64.rpm
 aef8bdd4c0bda5743915c563dea36ee7 
 x86_64/10.2/RPMS/lib64curl3-7.13.1-2.1.102mdk.x86_64.rpm
 9da4ae9331b99a7a2a07acd2d4c2cb5a 
 x86_64/10.2/RPMS/lib64curl3-devel-7.13.1-2.1.102mdk.x86_64.rpm
 853ad6f024fe5247d8e97c081c854476 
 x86_64/10.2/SRPMS/curl-7.13.1-2.1.102mdk.src.rpm

 Mandrivalinux 2006.0:
 07805740a9f93561d6ac56918a781245 
 2006.0/RPMS/curl-7.14.0-2.1.20060mdk.i586.rpm
 3d97dd7714cbe0b198683163467c0d6f 
 2006.0/RPMS/libcurl3-7.14.0-2.1.20060mdk.i586.rpm
 6a7d8ed065b64e03e3bdd12c60611655 
 2006.0/RPMS/libcurl3-devel-7.14.0-2.1.20060mdk.i586.rpm
 850cab614960f3a8ea2121d5e35457af 
 2006.0/SRPMS/curl-7.14.0-2.1.20060mdk.src.rpm

 Mandrivalinux 2006.0/X86_64:
 aa1ccbb76d1f0a706c72c44028d8e4cc 
 x86_64/2006.0/RPMS/curl-7.14.0-2.1.20060mdk.x86_64.rpm
 ec71600f685de4c15211c83a399bd04a 
 x86_64/2006.0/RPMS/lib64curl3-7.14.0-2.1.20060mdk.x86_64.rpm
 b791d65f418fd714466f07549f8688fd 
 x86_64/2006.0/RPMS/lib64curl3-devel-7.14.0-2.1.20060mdk.x86_64.rpm
 850cab614960f3a8ea2121d5e35457af 
 x86_64/2006.0/SRPMS/curl-7.14.0-2.1.20060mdk.src.rpm

 Multi Network Firewall 2.0:
 791c952a30b42a72f385ece06fdd1f47  mnf/2.0/RPMS/curl-7.11.0-2.2.M20mdk.i586.rpm
 717b91b2099ad4132ce54dc8da3cff44 
 mnf/2.0/RPMS/libcurl2-7.11.0-2.2.M20mdk.i586.rpm
 6fdb16af536f1539ce60cecefd2db61b  mnf/2.0/SRPMS/curl-7.11.0-2.2.M20mdk.src.rpm

 Corporate 3.0:
 40231d093f311328f0985db5f71ae7f9 
 corporate/3.0/RPMS/curl-7.11.0-2.2.C30mdk.i586.rpm
 7974dc65bf872a05910a0017383f34a1 
 corporate/3.0/RPMS/libcurl2-7.11.0-2.2.C30mdk.i586.rpm
 70f87a4964fdba5256d475796a6af4d8 
 corporate/3.0/RPMS/libcurl2-devel-7.11.0-2.2.C30mdk.i586.rpm
 a952e90be7922ed1b153fca1c94b0d9b 
 corporate/3.0/SRPMS/curl-7.11.0-2.2.C30mdk.src.rpm

 Corporate 3.0/X86_64:
 6b34e27cc2729a905359d616ea98677f 
 x86_64/corporate/3.0/RPMS/curl-7.11.0-2.2.C30mdk.x86_64.rpm
 36f7fbf58702e2a3d7d49fd384d9ae91 
 x86_64/corporate/3.0/RPMS/lib64curl2-7.11.0-2.2.C30mdk.x86_64.rpm
 03d4b8f01e1b916afeff6d51b7b04581 
 x86_64/corporate/3.0/RPMS/lib64curl2-devel-7.11.0-2.2.C30mdk.x86_64.rpm
 a952e90be7922ed1b153fca1c94b0d9b 
 x86_64/corporate/3.0/SRPMS/curl-7.11.0-2.2.C30mdk.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrakeUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFDTyYPmqjQ0CJFipgRAm7qAJ9JzbVvA8NTm0+cpEwGqw2BJEbJuQCgqD93
2XvbwtU9G5LK6h3Ax0fbD5g=
=hjAK
-----END PGP SIGNATURE-----


------------=_1129261965-811-1058
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1129261965-811-1058--