SUSE-SU-2016:2330-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 16 Sept 2016, 15:13
Last modified:04 Feb 2026, 02:42

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Sept 2016, 15:13
Published
Vulnerability first disclosed
04 Feb 2026, 02:42
Last Modified
Vulnerability information updated

Description

Security update for curl This update for curl fixes the following issues: Security issues fixed: - CVE-2016-5419: TLS session resumption client cert bypass (bsc#991389) - CVE-2016-5420: Re-using connections with wrong client cert (bsc#991390) - CVE-2016-5421: use of connection struct after free (bsc#991391) - CVE-2016-7141: Fixed incorrect reuse of client certificates with NSS (bsc#997420) Also the following bug was fixed: - fixing a performance issue (bsc#991746)

Affected Systems

  • suse•curl&distro=SUSE Linux Enterprise Desktop 12 SP1

    < 7.37.0-28.1

  • suse•curl&distro=SUSE Linux Enterprise Server 12 SP1

    < 7.37.0-28.1

  • suse•curl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1

    < 7.37.0-28.1

  • suse•curl&distro=SUSE Linux Enterprise Software Development Kit 12 SP1

    < 7.37.0-28.1

References (10)