FlawAtlas
Search the atlas
SUSE-SU-2016:2449-1 Not scored

Security update for curl

This update for curl fixes the following issues: - CVE-2016-5419: TLS session resumption client cert bypass (bsc#991389) - CVE-2016-5420: Re-using connections with wrong client cert (bsc#991390) - CVE-2016-7141: Fixed incorrect reuse of client certificates (bsc#997420).

Exploit probability Not scored
Published October 4, 2016
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Point of Sale 11 SP3 curl
SUSE:Linux Enterprise Server 11 SP3-LTSS curl
SUSE:Linux Enterprise Server 11 SP3-LTSS curl-openssl1
SUSE:Linux Enterprise Server 11 SP3-TERADATA curl
SUSE:Linux Enterprise Server 11 SP3-TERADATA curl-openssl1
SUSE:Linux Enterprise Server 11 SP4 curl
SUSE:Linux Enterprise Server 11-SECURITY curl-openssl1
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 curl
SUSE:Linux Enterprise Software Development Kit 11 SP4 curl
SUSE:Manager 2.1 curl
SUSE:Manager Proxy 2.1 curl
SUSE:OpenStack Cloud 5 curl

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2016:2449-1

This update for curl fixes the following issues: - CVE-2016-5419: TLS session resumption client cert bypass (bsc#991389) - CVE-2016-5420: Re-using connections with wrong client cert (bsc#991390) - CVE-2016-7141: Fixed incorrect reuse of client certificates (bsc#997420).

View original source

05 / REFERENCES

Further evidence