remote code execution in curl

2005-02-2814:07:02

lists.opensuse.org

0.023 Low

EPSS

Percentile

88.5%

JSON

infamous41md@xxxxxxxxxx reported a vulnerability in libcurl, the HTTP/FTP retrieval library. This library is used by lots of programs, including YaST2 and PHP4.

Solution

None, please install the fixed packages.

OSVersionArchitecturePackageVersionFilename
openSUSE9.2i586curl-devel< 7.12.0-2.2curl-devel-7.12.0-2.2.i586.rpm
openSUSE9.2x86_64curl< 7.12.0-2.2curl-7.12.0-2.2.x86_64.rpm
openSUSE9.1i586curl-devel< 7.11.0-39.4curl-devel-7.11.0-39.4.i586.rpm
openSUSE9.1x86_64curl< 7.11.0-39.4curl-7.11.0-39.4.x86_64.rpm
openSUSE9.1x86_64curl-devel< 7.11.0-39.4curl-devel-7.11.0-39.4.x86_64.rpm
openSUSE9.2i586curl< 7.12.0-2.2curl-7.12.0-2.2.i586.rpm
openSUSE9.2x86_64curl-devel< 7.12.0-2.2curl-devel-7.12.0-2.2.x86_64.rpm
openSUSE9.1i586curl< 7.11.0-39.4curl-7.11.0-39.4.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	9.2	i586	curl-devel	< 7.12.0-2.2	curl-devel-7.12.0-2.2.i586.rpm
openSUSE	9.2	x86_64	curl	< 7.12.0-2.2	curl-7.12.0-2.2.x86_64.rpm
openSUSE	9.1	i586	curl-devel	< 7.11.0-39.4	curl-devel-7.11.0-39.4.i586.rpm
openSUSE	9.1	x86_64	curl	< 7.11.0-39.4	curl-7.11.0-39.4.x86_64.rpm
openSUSE	9.1	x86_64	curl-devel	< 7.11.0-39.4	curl-devel-7.11.0-39.4.x86_64.rpm
openSUSE	9.2	i586	curl	< 7.12.0-2.2	curl-7.12.0-2.2.i586.rpm
openSUSE	9.2	x86_64	curl-devel	< 7.12.0-2.2	curl-devel-7.12.0-2.2.x86_64.rpm
openSUSE	9.1	i586	curl	< 7.11.0-39.4	curl-7.11.0-39.4.i586.rpm

0.023 Low

EPSS

Percentile

88.5%

JSON

Related for SUSE-SA:2005:011