gpp_maybe Security update for curl

SUSE-SLE-SDK-12-SP4-2019-339

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3822: Fixed a NTLMv2 type-3 header stack buffer overflow (bsc#1123377). - CVE-2019-3823: Fixed an out-of-bounds read in the SMTP end-of-response (bsc#1123378). - CVE-2018-16890: Fixed an out-of-bounds buffer read in NTLM type2 (bsc#1123371). - CVE-2018-16842: Fixed an out-of-bounds read in tool_msgs.c (bsc#1113660). - CVE-2018-16840: Fixed a use-after-free in handle close (bsc#1113029). - CVE-2018-16839: Fixed an SASL password overflow caused by an integer overflow (bsc#1112758).

• Release Date
  Feb 13 2019
• References
  Bugzilla: 1113660, 1123371, 1113029, 1112758, 1123377, 1123378
  CVEs: CVE-2018-16890, CVE-2018-16842, CVE-2019-3823, CVE-2019-3822, CVE-2018-16840, CVE-2018-16839
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-4.3.1

  lock rpm