SUSE-SU-2018:1327-1
Security update for curl
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for curl fixes several issues: Security issues fixed: - CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client (bsc#1092098) Non security issues fixed: - If the DEFAULT_SUSE cipher list is not available use the HIGH cipher alias before failing. (bsc#1086825)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12 | curl, libcurl4, libcurl4-32bit | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.1 | curl, libcurl4, libcurl4-32bit | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.2 | curl, libcurl4, libcurl4-32bit | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.3 | curl, libcurl-devel, libcurl4 ve 1 tane daha | 7.37.0-37.23.1 |
4 kaynaktaki 13 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12 | curl | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12 | libcurl4 | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12 | libcurl4-32bit | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.1 | curl | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.1 | libcurl4 | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.1 | libcurl4-32bit | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.2 | curl | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.2 | libcurl4 | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.2 | libcurl4-32bit | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.3 | curl | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.3 | libcurl-devel | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.3 | libcurl4 | 7.37.0-37.23.1 |
| SUSE Linux Enterprise 12.3 | libcurl4-32bit | 7.37.0-37.23.1 |
Referanslar
- https://bugzilla.suse.com/1086825
- https://bugzilla.suse.com/1092098
- https://lists.suse.com/pipermail/sle-security-updates/2018-May/004062.html
- https://www.suse.com/security/cve/CVE-2018-1000301/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2018/suse-su-20181327-1/