cURL / libcURL URL Parser Buffer Overflow Vulnerability

cURL / libcURL URL Parser Buffer Overflow Vulnerability

Solution:
Please see the referenced advisories for more information.

OpenOffice OpenOffice 1.0.1

OpenOffice OpenOffice 2.0.2
http://download.openoffice.org/2.0.2/index.html

OpenOffice OpenOffice 1.1.51

OpenOffice OpenOffice 2.0.2
http://download.openoffice.org/2.0.2/index.html

Apple Mac OS X 10.4.11

Apple SecUpd2008-002PPC.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002PPC.dmg

Apple SecUpd2008-002Univ.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002Univ.dmg

Apple Mac OS X Server 10.4.11

Apple SecUpdSrvr2008-002PPC.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002PPC.dmg

Apple SecUpdSrvr2008-002Univ.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002Univ.dmg

Apple Mac OS X 10.5.2

Apple SecUpd2008-002.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002.dmg

Apple Mac OS X Server 10.5.2

Apple SecUpdSrvr2008-002.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002.dmg

Daniel Stenberg curl 7.11.2

Daniel Stenberg curl-7.15.1.tar.gz
http://curl.haxx.se/download/curl-7.15.1.tar.gz

Mandriva curl-7.13.1-2.2.102mdk.i586.rpm
Mandriva Linux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva curl-7.13.1-2.2.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva lib64curl3-7.13.1-2.2.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva lib64curl3-devel-7.13.1-2.2.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libcurl3-7.13.1-2.2.102mdk.i586.rpm
Mandriva Linux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libcurl3-devel-7.13.1-2.2.102mdk.i586.rpm
Mandriva Linux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Ubuntu libcurl2-dev_7.11.2-12ubuntu3.3_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2-dev_7. 11.2-12ubuntu3.3_amd64.deb

Ubuntu libcurl2-dev_7.11.2-12ubuntu3.3_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2-dev_7. 11.2-12ubuntu3.3_i386.deb

Ubuntu libcurl2-dev_7.11.2-12ubuntu3.3_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2-dev_7. 11.2-12ubuntu3.3_powerpc.deb

Ubuntu libcurl2_7.11.2-12ubuntu3.3_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2_7.11.2 -12ubuntu3.3_amd64.deb

Ubuntu libcurl2_7.11.2-12ubuntu3.3_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2_7.11.2 -12ubuntu3.3_i386.deb

Ubuntu libcurl2_7.11.2-12ubuntu3.3_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2_7.11.2 -12ubuntu3.3_powerpc.deb

Ubuntu libcurl3-dbg_7.12.3-2ubuntu3.5_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.12.3 -2ubuntu3.5_i386.deb

Daniel Stenberg curl 7.13.1

Daniel Stenberg curl-7.15.1.tar.gz
http://curl.haxx.se/download/curl-7.15.1.tar.gz

Mandriva libcurl3-devel-7.13.1-2.2.102mdk.i586.rpm
Mandriva Linux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva curl-7.13.1-2.1.102mdk.i586.rpm
Mandrivalinux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva curl-7.13.1-2.1.102mdk.x86_64.rpm
Mandrivalinux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Daniel Stenberg curl 7.14

Daniel Stenberg curl-7.15.1.tar.gz
http://curl.haxx.se/download/curl-7.15.1.tar.gz

Mandriva lib64curl3-devel-7.14.0-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva curl-7.14.0-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva curl-7.14.0-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva lib64curl3-7.14.0-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva lib64curl3-devel-7.14.0-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libcurl3-7.14.0-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libcurl3-devel-7.14.0-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva php-curl-5.0.4-1.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva php-curl-5.0.4-1.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Trustix curl-7.15.1-1tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix curl-7.15.1-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix curl-devel-7.15.1-1tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix curl-devel-7.15.1-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates/

Ubuntu curl_7.14.0-2ubuntu1.2_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.14.0-2ubuntu 1.2_amd64.deb

Ubuntu curl_7.14.0-2ubuntu1.2_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.14.0-2ubuntu 1.2_powerpc.deb

Ubuntu libcurl3-dbg_7.14.0-2ubuntu1.2_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.14.0 -2ubuntu1.2_amd64.deb

Ubuntu libcurl3-dbg_7.14.0-2ubuntu1.2_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.14.0 -2ubuntu1.2_i386.deb

Ubuntu libcurl3-dbg_7.14.0-2ubuntu1.2_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.14.0 -2ubuntu1.2_powerpc.deb

Ubuntu libcurl3-dev_7.14.0-2ubuntu1.2_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dev_7.14.0 -2ubuntu1.2_amd64.deb

Ubuntu libcurl3-dev_7.14.0-2ubuntu1.2_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dev_7.14.0 -2ubuntu1.2_i386.deb

Ubuntu libcurl3-dev_7.14.0-2ubuntu1.2_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dev_7.14.0 -2ubuntu1.2_powerpc.deb

Ubuntu libcurl3-gssapi_7.14.0-2ubuntu1.2_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl3-gssapi _7.14.0-2ubuntu1.2_amd64.deb

Ubuntu libcurl3-gssapi_7.14.0-2ubuntu1.2_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl3-gssapi _7.14.0-2ubuntu1.2_i386.deb

Ubuntu libcurl3-gssapi_7.14.0-2ubuntu1.2_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl3-gssapi _7.14.0-2ubuntu1.2_powerpc.deb

Ubuntu libcurl3_7.14.0-2ubuntu1.2_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.14.0-2ub untu1.2_amd64.deb

Ubuntu libcurl3_7.14.0-2ubuntu1.2_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.14.0-2ub untu1.2_i386.deb

Ubuntu libcurl3_7.14.0-2ubuntu1.2_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.14.0-2ub untu1.2_powerpc.deb

Daniel Stenberg curl 7.15

Daniel Stenberg curl-7.15.1.tar.gz
http://curl.haxx.se/download/curl-7.15.1.tar.gz