shield Security update for curl

slessp4-curl-12772

This update for curl fixes the following issues: - CVE-2016-5419: TLS session resumption client cert bypass (bsc#991389) - CVE-2016-5420: Re-using connections with wrong client cert (bsc#991390) - CVE-2016-7141: Fixed incorrect reuse of client certificates (bsc#997420).

• Release Date
  Oct 4 2016
• References
  Bugzilla: 991389, 991390, 997420
  CVEs: CVE-2016-7141, CVE-2016-5420, CVE-2016-5419
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.61.1 lock rpm lock src

  libcurl4
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

  libcurl4-32bit
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.61.1 lock rpm lock src

  libcurl4
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

  libcurl4-x86
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

SUSE Linux Enterprise Server 11.4 i586

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.61.1 lock rpm lock src

  libcurl4
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.61.1 lock rpm lock src

  libcurl4
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

  libcurl4-32bit
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.61.1 lock rpm lock src

  libcurl4
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm

  libcurl4-32bit
  cURL shared library version 4

  7.19.7-1.61.1 lock rpm