shield Security update for curl

SUSE-SLE-SDK-12-SP1-2016-1364

This update for curl fixes the following issues: Security issues fixed: - CVE-2016-5419: TLS session resumption client cert bypass (bsc#991389) - CVE-2016-5420: Re-using connections with wrong client cert (bsc#991390) - CVE-2016-5421: use of connection struct after free (bsc#991391) - CVE-2016-7141: Fixed incorrect reuse of client certificates with NSS (bsc#997420) Also the following bug was fixed: - fixing a performance issue (bsc#991746)

• Release Date
  Sep 16 2016
• References
  Bugzilla: 991389, 991391, 991390, 991746, 997420
  CVEs: CVE-2016-5419, CVE-2016-5421, CVE-2016-5420, CVE-2016-7141
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.1 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-28.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.37.0-28.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-28.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.37.0-28.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-28.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.37.0-28.1 lock rpm