Test ID:	1.3.6.1.4.1.25623.1.1.13.2016.219.01
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2016-219-01)
Summary:	The remote host is missing an update for the 'curl' package(s) announced via the SSA:2016-219-01 advisory.
Description:	Summary: The remote host is missing an update for the 'curl' package(s) announced via the SSA:2016-219-01 advisory. Vulnerability Insight: New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/curl-7.50.1-i586-1_slack14.2.txz: Upgraded. This release fixes security issues: TLS: switch off SSL session id when client cert is used TLS: only reuse connections with the same client cert curl_multi_cleanup: clear connection pointer for easy handles For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'curl' package(s) on Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware 14.0, Slackware 14.1, Slackware 14.2, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5419 BugTraq ID: 92292 http://www.securityfocus.com/bid/92292 BugTraq ID: 92319 http://www.securityfocus.com/bid/92319 Debian Security Information: DSA-3638 (Google Search) http://www.debian.org/security/2016/dsa-3638 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/ https://security.gentoo.org/glsa/201701-47 https://curl.haxx.se/docs/adv_20160803A.html RedHat Security Advisories: RHSA-2016:2575 http://rhn.redhat.com/errata/RHSA-2016-2575.html RedHat Security Advisories: RHSA-2016:2957 http://rhn.redhat.com/errata/RHSA-2016-2957.html RedHat Security Advisories: RHSA-2018:3558 https://access.redhat.com/errata/RHSA-2018:3558 http://www.securitytracker.com/id/1036538 http://www.securitytracker.com/id/1038341 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.563059 SuSE Security Announcement: openSUSE-SU-2016:2227 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html SuSE Security Announcement: openSUSE-SU-2016:2379 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html http://www.ubuntu.com/usn/USN-3048-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-5420 BugTraq ID: 92309 http://www.securityfocus.com/bid/92309 https://curl.haxx.se/docs/adv_20160803B.html http://www.securitytracker.com/id/1036537 http://www.securitytracker.com/id/1036739 Common Vulnerability Exposure (CVE) ID: CVE-2016-5421 BugTraq ID: 92306 http://www.securityfocus.com/bid/92306 https://curl.haxx.se/docs/adv_20160803C.html http://www.securitytracker.com/id/1036536
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.