shield Security update for curl

slessp4-curl-13256

This update for curl fixes the following issues: - CVE-2017-1000100: TFP sends more than buffer size and it could lead to a denial of service (bsc#1051644) - CVE-2017-7407: ourWriteOut function problem could lead to a heap buffer over-read (bsc#1032309) - CVE-2016-9586: libcurl printf issue could lead to buffer overflow (bsc#1015332)

• Release Date
  Aug 31 2017
• References
  Bugzilla: 1015332, 1032309, 1051644
  CVEs: CVE-2017-1000100, CVE-2017-7407, CVE-2016-9586
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.70.3.1 lock rpm lock src

  libcurl4
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm

  libcurl4-32bit
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.70.3.1 lock rpm lock src

  libcurl4
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.70.3.1 lock rpm lock src

  libcurl4
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm

  libcurl4-x86
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.70.3.1 lock rpm lock src

  libcurl4
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm

  libcurl4-32bit
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm

SUSE Linux Enterprise Server 11.4 i586

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.19.7-1.70.3.1 lock rpm lock src

  libcurl4
  CURL shared library version 4

  7.19.7-1.70.3.1 lock rpm