Oval Definition:oval:org.opensuse.security:def:85271
Revision Date:2019-02-06Version:1
Title:Security update for curl (Important)
Description:

This update for curl fixes the following issues:

Security issues fixed:

- CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP (bsc#1123378). - CVE-2019-3822: Fixed a stack based buffer overflow in the function creating an outgoing NTLM type-3 message (bsc#1123377). - CVE-2018-16890: Fixed a heap buffer out-of-bounds read in the function handling incoming NTLM type-2 messages (bsc#1123371).
Family:unixClass:patch
Status:Reference(s):1123371
1123377
1123378
CVE-2018-16890
CVE-2019-3822
CVE-2019-3823
SUSE-SU-2019:0249-1
Platform(s):SUSE Linux Enterprise Server 12 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • curl-7.37.0-37.34.1 is installed
  • OR libcurl4-7.37.0-37.34.1 is installed
  • OR libcurl4-32bit-7.37.0-37.34.1 is installed
    • BACK