Vulnerability from csaf_suse
Published
2014-04-15 15:50
Modified
2014-04-15 15:50
Summary
Security update for curl
Notes
Title of the patch
Security update for curl
Description of the patch
This curl update fixes the following security issues:
* bnc#868627: wrong re-use of connections (CVE-2014-0138).
* bnc#868629: IP address wildcard certificate validation
(CVE-2014-0139).
* bnc#870444: --insecure option inappropriately enforcing security
safeguard.
Security Issue references:
* CVE-2014-0138
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138>
* CVE-2014-0139
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139>
Patchnames
sdksp3-curl,sledsp3-curl,slessp3-curl
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for curl", title: "Title of the patch", }, { category: "description", text: "\nThis curl update fixes the following security issues:\n\n * bnc#868627: wrong re-use of connections (CVE-2014-0138).\n * bnc#868629: IP address wildcard certificate validation\n (CVE-2014-0139).\n * bnc#870444: --insecure option inappropriately enforcing security\n safeguard.\n\nSecurity Issue references:\n\n * CVE-2014-0138\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138>\n * CVE-2014-0139\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139>\n\n", title: "Description of the patch", }, { category: "details", text: "sdksp3-curl,sledsp3-curl,slessp3-curl", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0962-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:0962-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20150962-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:0962-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html", }, { category: "self", summary: "SUSE Bug 824517", url: "https://bugzilla.suse.com/824517", }, { category: "self", summary: "SUSE Bug 849596", url: "https://bugzilla.suse.com/849596", }, { category: "self", summary: "SUSE Bug 858673", url: "https://bugzilla.suse.com/858673", }, { category: "self", summary: "SUSE Bug 868627", url: "https://bugzilla.suse.com/868627", }, { category: "self", summary: "SUSE Bug 868629", url: "https://bugzilla.suse.com/868629", }, { category: "self", summary: "SUSE Bug 870444", url: "https://bugzilla.suse.com/870444", }, { category: "self", summary: "SUSE Bug 927174", url: "https://bugzilla.suse.com/927174", }, { category: "self", summary: "SUSE Bug 927556", url: "https://bugzilla.suse.com/927556", }, { category: "self", summary: "SUSE Bug 927746", url: "https://bugzilla.suse.com/927746", }, { category: "self", summary: "SUSE Bug 928533", url: "https://bugzilla.suse.com/928533", }, { category: "self", summary: "SUSE CVE CVE-2013-2174 page", url: "https://www.suse.com/security/cve/CVE-2013-2174/", }, { category: "self", summary: "SUSE CVE CVE-2013-4545 page", url: "https://www.suse.com/security/cve/CVE-2013-4545/", }, { category: "self", summary: "SUSE CVE CVE-2014-0015 page", url: "https://www.suse.com/security/cve/CVE-2014-0015/", }, { category: "self", summary: "SUSE CVE CVE-2014-0138 page", url: "https://www.suse.com/security/cve/CVE-2014-0138/", }, { category: "self", summary: "SUSE CVE CVE-2014-0139 page", url: "https://www.suse.com/security/cve/CVE-2014-0139/", }, { category: "self", summary: "SUSE CVE CVE-2015-3143 page", url: "https://www.suse.com/security/cve/CVE-2015-3143/", }, { category: "self", summary: "SUSE CVE CVE-2015-3148 page", url: "https://www.suse.com/security/cve/CVE-2015-3148/", }, { category: "self", summary: "SUSE CVE CVE-2015-3153 page", url: "https://www.suse.com/security/cve/CVE-2015-3153/", }, ], title: "Security update for curl", tracking: { current_release_date: "2014-04-15T15:50:15Z", generator: { date: "2014-04-15T15:50:15Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:0962-1", initial_release_date: "2014-04-15T15:50:15Z", revision_history: [ { date: "2014-04-15T15:50:15Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "libcurl-devel-7.19.7-1.38.1.i586", product: { name: "libcurl-devel-7.19.7-1.38.1.i586", product_id: "libcurl-devel-7.19.7-1.38.1.i586", }, }, { category: "product_version", name: "curl-7.19.7-1.38.1.i586", product: { name: "curl-7.19.7-1.38.1.i586", product_id: "curl-7.19.7-1.38.1.i586", }, }, { category: "product_version", name: "libcurl4-7.19.7-1.38.1.i586", product: { name: "libcurl4-7.19.7-1.38.1.i586", product_id: "libcurl4-7.19.7-1.38.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "libcurl-devel-7.19.7-1.38.1.ia64", product: { name: "libcurl-devel-7.19.7-1.38.1.ia64", product_id: "libcurl-devel-7.19.7-1.38.1.ia64", }, }, { category: "product_version", name: "curl-7.19.7-1.38.1.ia64", product: { name: "curl-7.19.7-1.38.1.ia64", product_id: "curl-7.19.7-1.38.1.ia64", }, }, { category: "product_version", name: "libcurl4-7.19.7-1.38.1.ia64", product: { name: "libcurl4-7.19.7-1.38.1.ia64", product_id: "libcurl4-7.19.7-1.38.1.ia64", }, }, { category: "product_version", name: "libcurl4-x86-7.19.7-1.38.1.ia64", product: { name: "libcurl4-x86-7.19.7-1.38.1.ia64", product_id: "libcurl4-x86-7.19.7-1.38.1.ia64", }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "libcurl-devel-7.19.7-1.38.1.ppc64", product: { name: "libcurl-devel-7.19.7-1.38.1.ppc64", product_id: "libcurl-devel-7.19.7-1.38.1.ppc64", }, }, { category: "product_version", name: "curl-7.19.7-1.38.1.ppc64", product: { name: "curl-7.19.7-1.38.1.ppc64", product_id: "curl-7.19.7-1.38.1.ppc64", }, }, { category: "product_version", name: "libcurl4-7.19.7-1.38.1.ppc64", product: { name: "libcurl4-7.19.7-1.38.1.ppc64", product_id: "libcurl4-7.19.7-1.38.1.ppc64", }, }, { category: "product_version", name: "libcurl4-32bit-7.19.7-1.38.1.ppc64", product: { name: "libcurl4-32bit-7.19.7-1.38.1.ppc64", product_id: "libcurl4-32bit-7.19.7-1.38.1.ppc64", }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "libcurl-devel-7.19.7-1.38.1.s390x", product: { name: "libcurl-devel-7.19.7-1.38.1.s390x", product_id: "libcurl-devel-7.19.7-1.38.1.s390x", }, }, { category: "product_version", name: "curl-7.19.7-1.38.1.s390x", product: { name: "curl-7.19.7-1.38.1.s390x", product_id: "curl-7.19.7-1.38.1.s390x", }, }, { category: "product_version", name: "libcurl4-7.19.7-1.38.1.s390x", product: { name: "libcurl4-7.19.7-1.38.1.s390x", product_id: "libcurl4-7.19.7-1.38.1.s390x", }, }, { category: "product_version", name: "libcurl4-32bit-7.19.7-1.38.1.s390x", product: { name: "libcurl4-32bit-7.19.7-1.38.1.s390x", product_id: "libcurl4-32bit-7.19.7-1.38.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "libcurl-devel-7.19.7-1.38.1.x86_64", product: { name: "libcurl-devel-7.19.7-1.38.1.x86_64", product_id: "libcurl-devel-7.19.7-1.38.1.x86_64", }, }, { category: "product_version", name: "curl-7.19.7-1.38.1.x86_64", product: { name: "curl-7.19.7-1.38.1.x86_64", product_id: "curl-7.19.7-1.38.1.x86_64", }, }, { category: "product_version", name: "libcurl4-7.19.7-1.38.1.x86_64", product: { name: "libcurl4-7.19.7-1.38.1.x86_64", product_id: "libcurl4-7.19.7-1.38.1.x86_64", }, }, { category: "product_version", name: "libcurl4-32bit-7.19.7-1.38.1.x86_64", product: { name: "libcurl4-32bit-7.19.7-1.38.1.x86_64", product_id: "libcurl4-32bit-7.19.7-1.38.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Software Development Kit 11 SP3", product: { name: "SUSE Linux Enterprise Software Development Kit 11 SP3", product_id: "SUSE Linux Enterprise Software Development Kit 11 SP3", product_identification_helper: { cpe: "cpe:/a:suse:sle-sdk:11:sp3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 11 SP3", product: { name: "SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sles:11:sp3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 11 SP3-TERADATA", product: { name: "SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA", product_identification_helper: { cpe: "cpe:/o:suse:sles:11:sp3:teradata", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", product: { name: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:11:sp3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "libcurl-devel-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3", product_id: "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", }, product_reference: "libcurl-devel-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl-devel-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3", product_id: "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", }, product_reference: "libcurl-devel-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl-devel-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3", product_id: "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", }, product_reference: "libcurl-devel-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl-devel-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP3", product_id: "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", }, product_reference: "libcurl-devel-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl-devel-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3", product_id: "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl-devel-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", }, product_reference: "curl-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", }, product_reference: "curl-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", }, product_reference: "libcurl4-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", }, product_reference: "curl-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", }, product_reference: "curl-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", }, product_reference: "curl-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", }, product_reference: "curl-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", }, product_reference: "curl-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", }, product_reference: "libcurl4-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", }, product_reference: "libcurl4-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", }, product_reference: "libcurl4-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", }, product_reference: "libcurl4-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-x86-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3", product_id: "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", }, product_reference: "libcurl4-x86-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", }, product_reference: "curl-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", }, product_reference: "curl-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", }, product_reference: "curl-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", }, product_reference: "curl-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", }, product_reference: "curl-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", }, product_reference: "libcurl4-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", }, product_reference: "libcurl4-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", }, product_reference: "libcurl4-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", }, product_reference: "libcurl4-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "libcurl4-x86-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA", product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", }, product_reference: "libcurl4-x86-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", }, product_reference: "curl-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", }, product_reference: "curl-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", }, product_reference: "curl-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", }, product_reference: "curl-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", }, product_reference: "curl-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", }, product_reference: "libcurl4-7.19.7-1.38.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", }, product_reference: "libcurl4-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", }, product_reference: "libcurl4-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", }, product_reference: "libcurl4-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", }, product_reference: "libcurl4-32bit-7.19.7-1.38.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, { category: "default_component_of", full_product_name: { name: "libcurl4-x86-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", }, product_reference: "libcurl4-x86-7.19.7-1.38.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP3", }, ], }, vulnerabilities: [ { cve: "CVE-2013-2174", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2174", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a \"%\" (percent) character.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2174", url: "https://www.suse.com/security/cve/CVE-2013-2174", }, { category: "external", summary: "SUSE Bug 824517 for CVE-2013-2174", url: "https://bugzilla.suse.com/824517", }, { category: "external", summary: "SUSE Bug 917692 for CVE-2013-2174", url: "https://bugzilla.suse.com/917692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "moderate", }, ], title: "CVE-2013-2174", }, { cve: "CVE-2013-4545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-4545", }, ], notes: [ { category: "general", text: "cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-4545", url: "https://www.suse.com/security/cve/CVE-2013-4545", }, { category: "external", summary: "SUSE Bug 849596 for CVE-2013-4545", url: "https://bugzilla.suse.com/849596", }, { category: "external", summary: "SUSE Bug 870444 for CVE-2013-4545", url: "https://bugzilla.suse.com/870444", }, { category: "external", summary: "SUSE Bug 880252 for CVE-2013-4545", url: "https://bugzilla.suse.com/880252", }, { category: "external", summary: "SUSE Bug 882520 for CVE-2013-4545", url: "https://bugzilla.suse.com/882520", }, { category: "external", summary: "SUSE Bug 924250 for CVE-2013-4545", url: "https://bugzilla.suse.com/924250", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "moderate", }, ], title: "CVE-2013-4545", }, { cve: "CVE-2014-0015", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0015", }, ], notes: [ { category: "general", text: "cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0015", url: "https://www.suse.com/security/cve/CVE-2014-0015", }, { category: "external", summary: "SUSE Bug 858673 for CVE-2014-0015", url: "https://bugzilla.suse.com/858673", }, { category: "external", summary: "SUSE Bug 868627 for CVE-2014-0015", url: "https://bugzilla.suse.com/868627", }, { category: "external", summary: "SUSE Bug 880252 for CVE-2014-0015", url: "https://bugzilla.suse.com/880252", }, { category: "external", summary: "SUSE Bug 882520 for CVE-2014-0015", url: "https://bugzilla.suse.com/882520", }, { category: "external", summary: "SUSE Bug 927556 for CVE-2014-0015", url: "https://bugzilla.suse.com/927556", }, { category: "external", summary: "SUSE Bug 962983 for CVE-2014-0015", url: "https://bugzilla.suse.com/962983", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "low", }, ], title: "CVE-2014-0015", }, { cve: "CVE-2014-0138", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0138", }, ], notes: [ { category: "general", text: "The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0138", url: "https://www.suse.com/security/cve/CVE-2014-0138", }, { category: "external", summary: "SUSE Bug 868627 for CVE-2014-0138", url: "https://bugzilla.suse.com/868627", }, { category: "external", summary: "SUSE Bug 880252 for CVE-2014-0138", url: "https://bugzilla.suse.com/880252", }, { category: "external", summary: "SUSE Bug 882520 for CVE-2014-0138", url: "https://bugzilla.suse.com/882520", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "moderate", }, ], title: "CVE-2014-0138", }, { cve: "CVE-2014-0139", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0139", }, ], notes: [ { category: "general", text: "cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0139", url: "https://www.suse.com/security/cve/CVE-2014-0139", }, { category: "external", summary: "SUSE Bug 868629 for CVE-2014-0139", url: "https://bugzilla.suse.com/868629", }, { category: "external", summary: "SUSE Bug 880252 for CVE-2014-0139", url: "https://bugzilla.suse.com/880252", }, { category: "external", summary: "SUSE Bug 882520 for CVE-2014-0139", url: "https://bugzilla.suse.com/882520", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "moderate", }, ], title: "CVE-2014-0139", }, { cve: "CVE-2015-3143", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3143", }, ], notes: [ { category: "general", text: "cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3143", url: "https://www.suse.com/security/cve/CVE-2015-3143", }, { category: "external", summary: "SUSE Bug 927556 for CVE-2015-3143", url: "https://bugzilla.suse.com/927556", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "moderate", }, ], title: "CVE-2015-3143", }, { cve: "CVE-2015-3148", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3148", }, ], notes: [ { category: "general", text: "cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3148", url: "https://www.suse.com/security/cve/CVE-2015-3148", }, { category: "external", summary: "SUSE Bug 1092962 for CVE-2015-3148", url: "https://bugzilla.suse.com/1092962", }, { category: "external", summary: "SUSE Bug 927746 for CVE-2015-3148", url: "https://bugzilla.suse.com/927746", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "moderate", }, ], title: "CVE-2015-3148", }, { cve: "CVE-2015-3153", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3153", }, ], notes: [ { category: "general", text: "The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3153", url: "https://www.suse.com/security/cve/CVE-2015-3153", }, { category: "external", summary: "SUSE Bug 928533 for CVE-2015-3153", url: "https://bugzilla.suse.com/928533", }, { category: "external", summary: "SUSE Bug 951391 for CVE-2015-3153", url: "https://bugzilla.suse.com/951391", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-04-15T15:50:15Z", details: "moderate", }, ], title: "CVE-2015-3153", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.