SUSE-SU-2017:1117-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2017:1117-1

Related

Published

2017-04-26T15:31:56Z

Modified

2017-04-26T15:31:56Z

Summary

Security update for curl

Details

This update for curl fixes the following issues:

These security issues were fixed:

CVE-2016-9586: libcurl printf floating point buffer overflow (bsc#1015332)
CVE-2017-7407: The ourWriteOut function in tool_writeout.c in curl might have allowed physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which lead to a heap-based buffer over-read (bsc#1032309).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.19.7-1.20.52.2

{
    "binaries": [
        {
            "libcurl-devel": "7.19.7-1.20.52.2"
        }
    ]
}