Security update for curl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:3681-1 Final 1 1 2018-11-08T16:55:53Z current 2018-11-08T16:55:53Z 2018-11-08T16:55:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for curl This update for curl fixes the following issues: - CVE-2018-16840: A use-after-free in SASL handle close was fixed (bsc#1112758) - CVE-2018-16842: A Out-of-bounds Read in tool_msgs.c was fixed which could lead to crashes (bsc#1113660) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-curl-13861,secsp3-curl-13861,slessp4-curl-13861 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20183681-1/ Link for SUSE-SU-2018:3681-1 https://lists.suse.com/pipermail/sle-security-updates/2018-November/004839.html E-Mail link for SUSE-SU-2018:3681-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1112758 SUSE Bug 1112758 https://bugzilla.suse.com/1113660 SUSE Bug 1113660 https://www.suse.com/security/cve/CVE-2018-16840/ SUSE CVE CVE-2018-16840 page https://www.suse.com/security/cve/CVE-2018-16842/ SUSE CVE CVE-2018-16842 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 libcurl-devel-7.37.0-70.38.1 curl-openssl1-7.37.0-70.38.1 libcurl4-openssl1-7.37.0-70.38.1 libcurl4-openssl1-32bit-7.37.0-70.38.1 libcurl4-openssl1-x86-7.37.0-70.38.1 curl-7.37.0-70.38.1 libcurl4-7.37.0-70.38.1 libcurl4-32bit-7.37.0-70.38.1 libcurl4-x86-7.37.0-70.38.1 curl-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11 SP4 libcurl4-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11 SP4 libcurl4-32bit-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11 SP4 libcurl4-x86-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11 SP4 curl-openssl1-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11-SECURITY libcurl4-openssl1-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11-SECURITY libcurl4-openssl1-32bit-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11-SECURITY libcurl4-openssl1-x86-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server 11-SECURITY curl-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcurl4-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcurl4-32bit-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcurl4-x86-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcurl-devel-7.37.0-70.38.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct. CVE-2018-16840 SUSE Linux Enterprise Server 11 SP4:curl-7.37.0-70.38.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-32bit-7.37.0-70.38.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-7.37.0-70.38.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-x86-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:curl-openssl1-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-32bit-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-x86-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:curl-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-32bit-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-x86-7.37.0-70.38.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libcurl-devel-7.37.0-70.38.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183681-1/ https://www.suse.com/security/cve/CVE-2018-16840.html CVE-2018-16840 https://bugzilla.suse.com/1112758 SUSE Bug 1112758 https://bugzilla.suse.com/1113029 SUSE Bug 1113029 https://bugzilla.suse.com/1122464 SUSE Bug 1122464 Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service. CVE-2018-16842 SUSE Linux Enterprise Server 11 SP4:curl-7.37.0-70.38.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-32bit-7.37.0-70.38.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-7.37.0-70.38.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-x86-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:curl-openssl1-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-32bit-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-7.37.0-70.38.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-x86-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:curl-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-32bit-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-7.37.0-70.38.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-x86-7.37.0-70.38.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libcurl-devel-7.37.0-70.38.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183681-1/ https://www.suse.com/security/cve/CVE-2018-16842.html CVE-2018-16842 https://bugzilla.suse.com/1113660 SUSE Bug 1113660 https://bugzilla.suse.com/1122464 SUSE Bug 1122464