Уведомление безопасности SUSE-SU-2013:1166-1

Высокая (6.8)

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

SUSE

compat-curl2 (any) compat-curl2-32bit (any) compat-curl2-64bit (any) compat-curl2-x86 (any) curl (any) libcurl4 (any) libcurl4-32bit (any) libcurl4-x86 (any) libcurl-devel (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 11 SP3, SUSE Linux Enterprise Software Development Kit 11 SP2, SUSE Linux Enterprise Server 11 SP2 for VMware, SUSE Linux Enterprise Server 11 SP3 for VMware, SUSE Linux Enterprise Server 11 SP2, SUSE Linux Enterprise Server 11 SP3, SUSE Linux Enterprise Desktop 11 SP2, SUSE Linux Enterprise Desktop 11 SP3, SUSE Linux Enterprise Desktop 10 SP4, SUSE Linux Enterprise Server 10 SP4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 11 SP3:
i586, ia64, ppc64, s390x, x86_64:
libcurl-devel - 7.19.7-1.28.1
SUSE Linux Enterprise Software Development Kit 11 SP2:
i586, ia64, ppc64, s390x, x86_64:
libcurl-devel - 7.19.7-1.20.27.1
SUSE Linux Enterprise Server 11 SP2 for VMware:
x86_64:
libcurl4-32bit - 7.19.7-1.20.27.1
SUSE Linux Enterprise Server 11 SP2 for VMware:
i586, x86_64:
curl - 7.19.7-1.20.27.1
libcurl4 - 7.19.7-1.20.27.1
SUSE Linux Enterprise Server 11 SP3 for VMware:
x86_64:
libcurl4-32bit - 7.19.7-1.28.1
SUSE Linux Enterprise Server 11 SP3 for VMware:
i586, x86_64:
libcurl4 - 7.19.7-1.28.1
curl - 7.19.7-1.28.1
SUSE Linux Enterprise Server 11 SP2:
ia64:
libcurl4-x86 - 7.19.7-1.20.27.1
SUSE Linux Enterprise Server 11 SP2:
i586, ia64, ppc64, s390x, x86_64:
curl - 7.19.7-1.20.27.1
libcurl4 - 7.19.7-1.20.27.1
SUSE Linux Enterprise Server 11 SP2:
ppc64, s390x, x86_64:
libcurl4-32bit - 7.19.7-1.20.27.1
SUSE Linux Enterprise Server 11 SP3:
ia64:
libcurl4-x86 - 7.19.7-1.28.1
SUSE Linux Enterprise Server 11 SP3:
i586, ia64, ppc64, s390x, x86_64:
libcurl4 - 7.19.7-1.28.1
curl - 7.19.7-1.28.1
SUSE Linux Enterprise Server 11 SP3:
ppc64, s390x, x86_64:
libcurl4-32bit - 7.19.7-1.28.1
SUSE Linux Enterprise Desktop 11 SP2:
x86_64:
libcurl4-32bit - 7.19.7-1.20.27.1
SUSE Linux Enterprise Desktop 11 SP2:
i586, x86_64:
curl - 7.19.7-1.20.27.1
libcurl4 - 7.19.7-1.20.27.1
SUSE Linux Enterprise Desktop 11 SP3:
x86_64:
libcurl4-32bit - 7.19.7-1.28.1
SUSE Linux Enterprise Desktop 11 SP3:
i586, x86_64:
libcurl4 - 7.19.7-1.28.1
curl - 7.19.7-1.28.1
SUSE Linux Enterprise Desktop 10 SP4:
x86_64:
compat-curl2-32bit - 7.11.0-20.11.1
SUSE Linux Enterprise Desktop 10 SP4:
i586, x86_64:
compat-curl2 - 7.11.0-20.11.1
SUSE Linux Enterprise Server 10 SP4:
ia64:
compat-curl2-x86 - 7.11.0-20.11.1
SUSE Linux Enterprise Server 10 SP4:
s390x, x86_64:
compat-curl2-32bit - 7.11.0-20.11.1
SUSE Linux Enterprise Server 10 SP4:
ppc:
compat-curl2-64bit - 7.11.0-20.11.1
SUSE Linux Enterprise Server 10 SP4:
i586, ia64, ppc, s390x, x86_64:
compat-curl2 - 7.11.0-20.11.1

http://lists.suse.com/pipermail/sle-security-updates/2013-July/000520.html
https://bugzilla.novell.com/824517
http://download.novell.com/patch/finder/?keywords=08501b52d2872aa5cb15654bf0e2cc4b
http://download.novell.com/patch/finder/?keywords=48e7e826323b1b9622eb2146f1b17768
http://download.novell.com/patch/finder/?keywords=ee2bedaf7e993baa8b03465c84047236

Источник: CVE
Наименование: CVE-2013-2174
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174