[slackware-security] curl

🗓️ 09 Aug 2017 20:47:02Reported by Slackware Linux ProjectType

New curl packages available for Slackware 13.0-14.2 to fix security issues. Upgraded to fix URL globbing, TFTP, and FILE buffer issue

Reporter	Title	Published	Views	Family All 168
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.55.0-alt1	9 Aug 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcURL affect IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM Chassis Management Module (CVE-2017-1000100)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in the libcURL component of Tivoli Netcool/OMNIbus (CVE-2017-1000100)	17 Jun 201815:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2017-1000100, CVE-2017-1000254, CVE-2017-1000257)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems (CVE-2017-1000100)	14 Apr 202314:32	–	ibm
FreeBSD	cURL -- multiple vulnerabilities	9 Aug 201700:00	–	freebsd
Tenable Nessus	macOS 10.13.x < 10.13.1 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Slackware	13.0	i486	curl	7.55.0	curl-7.55.0-i486-1_slack13.0.txz
Slackware	13.0	x86_64	curl	7.55.0	curl-7.55.0-x86_64-1_slack13.0.txz
Slackware	13.1	i486	curl	7.55.0	curl-7.55.0-i486-1_slack13.1.txz
Slackware	13.1	x86_64	curl	7.55.0	curl-7.55.0-x86_64-1_slack13.1.txz
Slackware	13.37	i486	curl	7.55.0	curl-7.55.0-i486-1_slack13.37.txz
Slackware	13.37	x86_64	curl	7.55.0	curl-7.55.0-x86_64-1_slack13.37.txz
Slackware	14.0	i486	curl	7.55.0	curl-7.55.0-i486-1_slack14.0.txz
Slackware	14.0	x86_64	curl	7.55.0	curl-7.55.0-x86_64-1_slack14.0.txz
Slackware	14.1	i486	curl	7.55.0	curl-7.55.0-i486-1_slack14.1.txz
Slackware	14.1	x86_64	curl	7.55.0	curl-7.55.0-x86_64-1_slack14.1.txz

09 Aug 2017 20:47Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

CVSS 36.5

CVSS 3.16.5

EPSS0.00623

SSVC