shield Security update for curl

SUSE-SLE-SERVER-12-2015-235

curl was updated to fix five security issues. The following vulnerabilities were fixed: * CVE-2015-3143: curl could re-use NTML authenticateds connections * CVE-2015-3144: curl could access memory out of bounds with zero length host names * CVE-2015-3145: curl cookie parser could access memory out of boundary * CVE-2015-3148: curl could treat Negotiate as not connection-oriented * CVE-2015-3153: curl could have sent sensitive HTTP headers also to proxies

• Release Date
  Apr 29 2015
• References
  Bugzilla: 927556, 927607, 927608, 927746, 928533
  CVEs: CVE-2015-3143, CVE-2015-3148, CVE-2015-3145, CVE-2015-3144, CVE-2015-3153
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-15.1 lock rpm lock src

  libcurl4
  Version 4 of cURL shared library

  7.37.0-15.1 lock rpm

  libcurl4-32bit
  Version 4 of cURL shared library

  7.37.0-15.1 lock rpm

SUSE Linux Enterprise Server 12 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-15.1 lock rpm lock src

  libcurl4
  Version 4 of cURL shared library

  7.37.0-15.1 lock rpm

  libcurl4-32bit
  Version 4 of cURL shared library

  7.37.0-15.1 lock rpm

SUSE Linux Enterprise Server 12 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-15.1 lock rpm lock src

  libcurl4
  Version 4 of cURL shared library

  7.37.0-15.1 lock rpm