Security update for curl
SUSE Security Update: Security update for curl
This update to curl fixes the following security issue:
* Don't set SSL_OP_ALL to avoid potential DTLS sniffing
attacks. ( CVE-2012-0036
> )
Announcement ID: | SUSE-SU-2012:0143-1 |
Rating: | moderate |
References: | #742306 |
Affected Products: |
An update that fixes one vulnerability is now available.
Description:
This update to curl fixes the following security issue:
* Don't set SSL_OP_ALL to avoid potential DTLS sniffing
attacks. ( CVE-2012-0036
Indications:
Everyone should install this update.
Package List:
- SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64):
- curl-7.15.1-19.20.1
- curl-devel-7.15.1-19.20.1
- SUSE Linux Enterprise Server 10 SP4 (s390x x86_64):
- curl-32bit-7.15.1-19.20.1
- SUSE Linux Enterprise Server 10 SP4 (ia64):
- curl-x86-7.15.1-19.20.1
- SUSE Linux Enterprise Server 10 SP4 (ppc):
- curl-64bit-7.15.1-19.20.1
- SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):
- curl-7.15.1-19.20.1
- curl-devel-7.15.1-19.20.1
- SUSE Linux Enterprise Desktop 10 SP4 (x86_64):
- curl-32bit-7.15.1-19.20.1
- SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64):
- curl-devel-7.15.1-19.20.1
References:
- http://support.novell.com/security/cve/CVE-2012-0036.html
- https://bugzilla.novell.com/742306
- http://download.suse.com/patch/finder/?keywords=8974c7b68cc0e0a4cf5b7453bd266343