Security update for curl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2339-2 Final 1 1 2019-09-12T12:18:17Z current 2019-09-12T12:18:17Z 2019-09-12T12:18:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for curl This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-2339,Container suse/sles12sp3:latest-2019-2339,HPE-Helion-OpenStack-8-2019-2339,SUSE-2019-2339,SUSE-OpenStack-Cloud-7-2019-2339,SUSE-OpenStack-Cloud-8-2019-2339,SUSE-OpenStack-Cloud-Crowbar-8-2019-2339,SUSE-SLE-SAP-12-SP1-2019-2339,SUSE-SLE-SAP-12-SP2-2019-2339,SUSE-SLE-SAP-12-SP3-2019-2339,SUSE-SLE-SERVER-12-SP1-2019-2339,SUSE-SLE-SERVER-12-SP2-2019-2339,SUSE-SLE-SERVER-12-SP2-BCL-2019-2339,SUSE-SLE-SERVER-12-SP3-2019-2339,SUSE-SLE-SERVER-12-SP3-BCL-2019-2339,SUSE-Storage-4-2019-2339,SUSE-Storage-5-2019-2339 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192339-2/ Link for SUSE-SU-2019:2339-2 https://www.suse.com/support/update/announcement/2019/suse-su-20192339-2.html E-Mail link for SUSE-SU-2019:2339-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1149496 SUSE Bug 1149496 https://www.suse.com/security/cve/CVE-2019-5482/ SUSE CVE CVE-2019-5482 page Container caasp/v4/nginx-ingress-controller:beta1 Container suse/sles12sp3:latest HPE Helion OpenStack 8 SUSE Enterprise Storage 4 SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 libcurl4-7.37.0-37.43.1 curl-7.37.0-37.43.1 libcurl4-32bit-7.37.0-37.43.1 libcurl-devel-7.37.0-37.43.1 libcurl-devel-32bit-7.37.0-37.43.1 libcurl-devel-64bit-7.37.0-37.43.1 libcurl4-64bit-7.37.0-37.43.1 libcurl4-7.37.0-37.43.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libcurl4-7.37.0-37.43.1 as a component of Container suse/sles12sp3:latest curl-7.37.0-37.43.1 as a component of HPE Helion OpenStack 8 libcurl4-7.37.0-37.43.1 as a component of HPE Helion OpenStack 8 libcurl4-32bit-7.37.0-37.43.1 as a component of HPE Helion OpenStack 8 curl-7.37.0-37.43.1 as a component of SUSE Enterprise Storage 4 libcurl4-7.37.0-37.43.1 as a component of SUSE Enterprise Storage 4 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Enterprise Storage 4 curl-7.37.0-37.43.1 as a component of SUSE Enterprise Storage 5 libcurl4-7.37.0-37.43.1 as a component of SUSE Enterprise Storage 5 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Enterprise Storage 5 curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 curl-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libcurl4-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 curl-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud 7 libcurl4-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud 7 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud 7 curl-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud 8 libcurl4-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud 8 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud 8 curl-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 libcurl4-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 libcurl4-32bit-7.37.0-37.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 Container caasp/v4/nginx-ingress-controller:beta1:libcurl4-7.37.0-37.43.1 Container suse/sles12sp3:latest:libcurl4-7.37.0-37.43.1 HPE Helion OpenStack 8:curl-7.37.0-37.43.1 HPE Helion OpenStack 8:libcurl4-32bit-7.37.0-37.43.1 HPE Helion OpenStack 8:libcurl4-7.37.0-37.43.1 SUSE Enterprise Storage 4:curl-7.37.0-37.43.1 SUSE Enterprise Storage 4:libcurl4-32bit-7.37.0-37.43.1 SUSE Enterprise Storage 4:libcurl4-7.37.0-37.43.1 SUSE Enterprise Storage 5:curl-7.37.0-37.43.1 SUSE Enterprise Storage 5:libcurl4-32bit-7.37.0-37.43.1 SUSE Enterprise Storage 5:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP1-LTSS:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP2-BCL:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP2-BCL:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP2-BCL:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP2-LTSS:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP3-BCL:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP3-BCL:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP3-BCL:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP3-LTSS:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcurl4-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:curl-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libcurl4-32bit-7.37.0-37.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libcurl4-7.37.0-37.43.1 SUSE OpenStack Cloud 7:curl-7.37.0-37.43.1 SUSE OpenStack Cloud 7:libcurl4-32bit-7.37.0-37.43.1 SUSE OpenStack Cloud 7:libcurl4-7.37.0-37.43.1 SUSE OpenStack Cloud 8:curl-7.37.0-37.43.1 SUSE OpenStack Cloud 8:libcurl4-32bit-7.37.0-37.43.1 SUSE OpenStack Cloud 8:libcurl4-7.37.0-37.43.1 SUSE OpenStack Cloud Crowbar 8:curl-7.37.0-37.43.1 SUSE OpenStack Cloud Crowbar 8:libcurl4-32bit-7.37.0-37.43.1 SUSE OpenStack Cloud Crowbar 8:libcurl4-7.37.0-37.43.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192339-2/ https://www.suse.com/security/cve/CVE-2019-5482.html CVE-2019-5482 https://bugzilla.suse.com/1149496 SUSE Bug 1149496 https://bugzilla.suse.com/1156634 SUSE Bug 1156634