RHSA-2018:3157-中危: curl 和 nss-pem 安全和BUG修复更新

Curl低版本重定向中的HTTP身份验证泄漏漏洞：
官网解释：

https://curl.haxx.se/docs/CVE-2018-1000007.html

Curl版本升级解决漏洞：

https://www.cnblogs.com/kingsonfu/p/10069755.html

防止原地址不存在：

1.安装repo
	rpm -Uvh  http://www.city-fan.org/ftp/contrib/yum-repo/rhel6/x86_64/city-fan.org-release-2-1.rhel6.noarch.rpm
2.查看repo包含的curl版本
	yum --showduplicates list curl --disablerepo="*" --enablerepo="city*"
3.修改repo的enable为1
	vi /etc/yum.repos.d/city-fan.org.repo

	[city-fan.org]
	name=city-fan.org repository for Red Hat Enterprise Linux (and clones) $releasever ($basearch)
	#baseurl=http://mirror.city-fan.org/ftp/contrib/yum-repo/rhel$releasever/$basearch
	mirrorlist=http://mirror.city-fan.org/ftp/contrib/yum-repo/mirrorlist-rhel$releasever
	enabled=1
	gpgcheck=1
	gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-city-fan.org
4.安装最新的curl
	yum install curl
5.如果提示缺少依赖 libnghttp2.so.14()(64bit)
	rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/Packages/l/libnghttp2-1.6.0-1.el6.1.x86_64.rpm
6.查看curl版本
	curl -V