Security update for curl, curl
SUSE Security Update: Security update for curl, curl
This update fixes the cookie domain tailmatch vulnerability
in curl. CVE-2013-1944 has been assigned to this issue.
Also the CA-Cert Bundle has been updated to the current
state.
Security Issue reference:
* CVE-2013-1944
>
| Announcement ID: | SUSE-SU-2013:0773-1 |
| Rating: | moderate |
| References: | #810010 #814655 |
| Affected Products: |
An update that solves one vulnerability and has one errata is now available.
Description:
This update fixes the cookie domain tailmatch vulnerability
in curl. CVE-2013-1944 has been assigned to this issue.
Also the CA-Cert Bundle has been updated to the current
state.
Security Issue reference:
* CVE-2013-1944
Package List:
- SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64):
- curl-7.15.1-19.26.1
- curl-devel-7.15.1-19.26.1
- SUSE Linux Enterprise Server 10 SP4 (s390x x86_64):
- curl-32bit-7.15.1-19.26.1
- SUSE Linux Enterprise Server 10 SP4 (ia64):
- curl-x86-7.15.1-19.26.1
- SUSE Linux Enterprise Server 10 SP4 (ppc):
- curl-64bit-7.15.1-19.26.1
- SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):
- curl-7.15.1-19.26.1
- curl-devel-7.15.1-19.26.1
- SUSE Linux Enterprise Desktop 10 SP4 (x86_64):
- curl-32bit-7.15.1-19.26.1
- SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64):
- curl-devel-7.15.1-19.26.1
References:
- http://support.novell.com/security/cve/CVE-2013-1944.html
- https://bugzilla.novell.com/810010
- https://bugzilla.novell.com/814655
- http://download.suse.com/patch/finder/?keywords=2ccca265ff5a56f164062acebb540e5d