SUSE-SU-2019:14064-1

Опубликовано: 24 мая 2019

Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

Security issue fixed:

CVE-2019-5436: Fixed a heap buffer overflow exists in tftp_receive_packet that receives data from a TFTP server (bsc#1135170).

curl-7.37.0-70.41.2

libcurl-devel-7.37.0-70.41.2

libcurl4-7.37.0-70.41.2

curl-7.37.0-70.41.2

libcurl4-7.37.0-70.41.2

libcurl4-32bit-7.37.0-70.41.2

curl-openssl1-7.37.0-70.41.2

libcurl4-openssl1-7.37.0-70.41.2

libcurl4-openssl1-32bit-7.37.0-70.41.2

libcurl4-openssl1-x86-7.37.0-70.41.2

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

SUSE Linux Enterprise Point of Sale 11 SP3:curl-7.37.0-70.41.2

SUSE Linux Enterprise Point of Sale 11 SP3:libcurl-devel-7.37.0-70.41.2

SUSE Linux Enterprise Point of Sale 11 SP3:libcurl4-7.37.0-70.41.2

SUSE Linux Enterprise Server 11 SP4-LTSS:curl-7.37.0-70.41.2