shield Security update for curl

SUSE-SLE-Module-Basesystem-15-2018-2578

This update for curl fixes the following issues: - CVE-2018-16839: A SASL password overflow via integer overflow was fixed which could lead to crashes (bsc#1112758) - CVE-2018-16840: A use-after-free in SASL handle close was fixed which could lead to crashes (bsc#1112758) - CVE-2018-16842: A Out-of-bounds Read in tool_msgs.c was fixed which could lead to crashes (bsc#1113660)

• Release Date
  Nov 5 2018
• References
  Bugzilla: 1113660, 1112758
  CVEs: CVE-2018-16840, CVE-2018-16839, CVE-2018-16842
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.14.3 lock rpm

Basesystem Module 15 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.14.3 lock rpm

Basesystem Module 15 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.14.3 lock rpm

Basesystem Module 15 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.14.3 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.14.3 lock rpm

  libcurl4-32bit
  Version 4 of cURL shared library

  7.60.0-3.14.3 lock rpm