Уведомление безопасности DSA-1738

Высокая (6.8)

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Debian

curl (any) libcurl3 (any) libcurl3-dbg (any) libcurl3-dev (any) libcurl3-gnutls (any) libcurl3-gnutls-dev (any) libcurl3-openssl-dev (any) libcurl4-gnutls-dev (any) libcurl4-openssl-dev (any)

Уведомление безопасности об уязвимостях libcurl4-gnutls-dev, libcurl4-openssl-dev, libcurl3-gnutls, libcurl3-dbg, libcurl3-gnutls-dev, libcurl3-dev, libcurl3, curl, libcurl3-openssl-dev

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
curl - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
s390x:
libcurl3-dbg - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
curl - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
i686:
libcurl3-gnutls - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
curl - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
hppa:
curl - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
sparc:
libcurl3-gnutls - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
curl - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
x86-64:
libcurl3-gnutls - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
curl - 7.15.5-1etch2
alpha:
curl - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
ia64:
libcurl3-dbg - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
curl - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
mips:
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
curl - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
noarch:
libcurl3-dev - 7.15.5-1etch2
mipsel:
curl - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
arm:
libcurl3-gnutls-dev - 7.15.5-1etch2
libcurl3-openssl-dev - 7.15.5-1etch2
libcurl3-dbg - 7.15.5-1etch2
libcurl3-gnutls - 7.15.5-1etch2
libcurl3 - 7.15.5-1etch2
curl - 7.15.5-1etch2
Debian GNU/Linux 5:
ppc:
libcurl4-openssl-dev - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
libcurl3-gnutls - 7.18.2-8lenny2
s390x:
libcurl3-gnutls - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
i686:
libcurl4-gnutls-dev - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl3-gnutls - 7.18.2-8lenny2
sparc:
libcurl3-gnutls - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
x86-64:
libcurl3-gnutls - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
armel:
libcurl3 - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
libcurl3-gnutls - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
alpha:
curl - 7.18.2-8lenny2
libcurl3-gnutls - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
ia64:
libcurl3-gnutls - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
mips:
libcurl3-dbg - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
libcurl3-gnutls - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
mipsel:
curl - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
libcurl3-gnutls - 7.18.2-8lenny2
libcurl4-gnutls-dev - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
hppa:
libcurl4-gnutls-dev - 7.18.2-8lenny2
curl - 7.18.2-8lenny2
libcurl3-gnutls - 7.18.2-8lenny2
libcurl3 - 7.18.2-8lenny2
libcurl4-openssl-dev - 7.18.2-8lenny2
libcurl3-dbg - 7.18.2-8lenny2

http://www.debian.org/security/dsa-1738/

Источник: CVE
Наименование: CVE-2009-0037
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037