Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2016-5419: TLS session resumption client cert bypass (bsc#991389) - CVE-2016-5420: Re-using connections with wrong client cert (bsc#991390) - CVE-2016-5421: use of connection struct after free (bsc#991391) - CVE-2016-7141: Fixed incorrect reuse of client certificates with NSS (bsc#997420) Also the following bug was fixed: - fixing a performance issue (bsc#991746)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for curl fixes the following issues: Security issues fixed: - CVE-2016-5419: TLS session resumption client cert bypass (bsc#991389) - CVE-2016-5420: Re-using connections with wrong client cert (bsc#991390) - CVE-2016-5421: use of connection struct after free (bsc#991391) - CVE-2016-7141: Fixed incorrect reuse of client certificates with NSS (bsc#997420) Also the following bug was fixed: - fixing a performance issue (bsc#991746)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/991389
- https://bugzilla.suse.com/991390
- https://bugzilla.suse.com/991391
- https://bugzilla.suse.com/991746
- https://bugzilla.suse.com/997420
- https://www.suse.com/security/cve/CVE-2016-5419
- https://www.suse.com/security/cve/CVE-2016-5420
- https://www.suse.com/security/cve/CVE-2016-5421
- https://www.suse.com/security/cve/CVE-2016-7141
- https://www.suse.com/support/update/announcement/2016/suse-su-20162330-1/