SUSE-SU-2018:0214-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:0214-1

Related

Published

2018-01-25T08:36:01Z

Modified

2018-01-25T08:36:01Z

Summary

Security update for curl

Details

This update for curl fixes several issues.

These security issues were fixed:

CVE-2017-1000254: Fix FTP PWD response parser out of bounds read (bsc#1061876).
CVE-2018-1000007: Prevent leaking authentication data to third parties when following redirects (bsc#1077001)

Also the following adjustment was made:

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.19.7-1.20.53.13.1

{
    "binaries": [
        {
            "libcurl-devel": "7.19.7-1.20.53.13.1"
        }
    ]
}