SUSE-SU-2013:0773-1: moderate: Security update for curl, curl

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for curl, curl
______________________________________________________________________________

Announcement ID:    SUSE-SU-2013:0773-1
Rating:             moderate
References:         #810010 #814655 
Cross-References:   CVE-2013-1944
Affected Products:
                    SUSE Linux Enterprise Server 10 SP4
                    SUSE Linux Enterprise Desktop 10 SP4
                    SLE SDK 10 SP4
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:


   This update fixes the cookie domain tailmatch vulnerability
   in curl.  CVE-2013-1944 has been assigned to this issue.
   Also the CA-Cert Bundle has  been updated to the current
   state.

   Security Issue reference:

   * CVE-2013-1944
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944
   >



Package List:

   - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64):

      curl-7.15.1-19.26.1
      curl-devel-7.15.1-19.26.1

   - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64):

      curl-32bit-7.15.1-19.26.1

   - SUSE Linux Enterprise Server 10 SP4 (ia64):

      curl-x86-7.15.1-19.26.1

   - SUSE Linux Enterprise Server 10 SP4 (ppc):

      curl-64bit-7.15.1-19.26.1

   - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):

      curl-7.15.1-19.26.1
      curl-devel-7.15.1-19.26.1

   - SUSE Linux Enterprise Desktop 10 SP4 (x86_64):

      curl-32bit-7.15.1-19.26.1

   - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64):

      curl-devel-7.15.1-19.26.1


References:

   http://support.novell.com/security/cve/CVE-2013-1944.html
   https://bugzilla.novell.com/810010
   https://bugzilla.novell.com/814655
   http://download.novell.com/patch/finder/?keywords=2ccca265ff5a56f164062acebb540e5d