shield Security update for curl

sdksp4-curl-13065

This update for curl fixes the following issues: These security issues were fixed: - CVE-2016-9586: libcurl printf floating point buffer overflow (bsc#1015332) - CVE-2017-7407: The ourWriteOut function in tool_writeout.c in curl might have allowed physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which lead to a heap-based buffer over-read (bsc#1032309).

• Release Date
  Apr 18 2017
• References
  Bugzilla: 1015332, 1032309
  CVEs: CVE-2017-7407, CVE-2016-9586
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.19.7-1.69.1 lock rpm