< back to search

shield Security update for curl

sdksp4-curl-13256

This update for curl fixes the following issues: - CVE-2017-1000100: TFP sends more than buffer size and it could lead to a denial of service (bsc#1051644) - CVE-2017-7407: ourWriteOut function problem could lead to a heap buffer over-read (bsc#1032309) - CVE-2016-9586: libcurl printf issue could lead to buffer overflow (bsc#1015332)

Release Date

Aug 31 2017
References

Bugzilla: 1015332, 1032309, 1051644
CVEs: CVE-2017-1000100, CVE-2017-7407, CVE-2016-9586
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 11.4 unknown

Packages

curl
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

Packages

curl
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

Packages

curl
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

Packages

curl
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

Packages

curl
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock src

libcurl-devel
A Tool for Transferring Data from URLs

7.19.7-1.70.3.1 lock rpm