shield Security update for curl

SUSE-SLE-SERVER-12-SP2-2018-522

This update for curl fixes the following issues: Following security issues were fixed: - CVE-2018-1000120: A buffer overflow exists in the FTP URL handling that allowed an attacker to cause a denial of service or possible code execution (bsc#1084521). - CVE-2018-1000121: A NULL pointer dereference exists in the LDAP code that allowed an attacker to cause a denial of service (bsc#1084524). - CVE-2018-1000122: A buffer over-read exists in the RTSP+RTP handling code that allowed an attacker to cause a denial of service or information leakage (bsc#1084532).

• Release Date
  Mar 22 2018
• References
  Bugzilla: 1084521, 1084532, 1084524
  CVEs: CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-37.17.1 lock rpm lock src

  libcurl4
  Version 4 of cURL shared library

  7.37.0-37.17.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-37.17.1 lock rpm lock src

  libcurl4
  Version 4 of cURL shared library

  7.37.0-37.17.1 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-37.17.1 lock rpm lock src

  libcurl4
  Version 4 of cURL shared library

  7.37.0-37.17.1 lock rpm

  libcurl4-32bit
  Version 4 of cURL shared library

  7.37.0-37.17.1 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.37.0-37.17.1 lock rpm lock src

  libcurl4
  Version 4 of cURL shared library

  7.37.0-37.17.1 lock rpm

  libcurl4-32bit
  Version 4 of cURL shared library

  7.37.0-37.17.1 lock rpm