< back to search

shield Security update for curl

SUSE-SLE-SDK-12-SP2-2017-1335

This update for curl fixes the following issues: - CVE-2017-1000100: TFP sends more than buffer size and it could lead to a denial of service (bsc#1051644) - CVE-2017-1000101: URL globbing out of bounds read could lead to a denial of service (bsc#1051643)

Release Date

Aug 16 2017
References

Bugzilla: 1051643, 1051644
CVEs: CVE-2017-1000101, CVE-2017-1000100
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

Packages

curl
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

Packages

curl
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

Packages

curl
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

Packages

curl
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.37.0-37.3.1 lock rpm