cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	36032
Class:	Design Error
CVE:	CVE-2009-2417
Remote:	Yes
Local:	No
Published:	Aug 12 2009 12:00AM
Updated:	Jun 27 2011 04:40PM
Credit:	Scott Cantor
Vulnerable:	VMWare vMA 4.0 VMWare ESX Server 4.0 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SuSE openSUSE 10.3 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux Desktop 9.0 rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 2 rPath Appliance Platform Linux Service 1 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Enterprise Linux AS 4 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux Desktop version 4 RedHat Enterprise Linux 5 server RedHat Desktop 3.0 Red Hat Enterprise Linux Desktop 5 client Pardus Linux 2009 0 Pardus Linux 2008 0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Linux Mandrake 2009.0 x86_64 MandrakeSoft Linux Mandrake 2009.0 MandrakeSoft Linux Mandrake 2008.1 x86_64 MandrakeSoft Linux Mandrake 2008.1 MandrakeSoft Linux Mandrake 2008.0 x86_64 MandrakeSoft Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Daniel Stenberg curl 7.19.5 Daniel Stenberg curl 7.19.4 Daniel Stenberg curl 7.19.3 Daniel Stenberg curl 7.19 Daniel Stenberg curl 7.18.1 Daniel Stenberg curl 7.18 Daniel Stenberg curl 7.17 Daniel Stenberg curl 7.16.4 Daniel Stenberg curl 7.15.5 Daniel Stenberg curl 7.15.3 Daniel Stenberg curl 7.15.2 Daniel Stenberg curl 7.15.1 Daniel Stenberg curl 7.15 Daniel Stenberg curl 7.14.1 Daniel Stenberg curl 7.14 Daniel Stenberg curl 7.13.2 Daniel Stenberg curl 7.13.1 Daniel Stenberg curl 7.13 Daniel Stenberg curl 7.12.3 Daniel Stenberg curl 7.12.2 Daniel Stenberg curl 7.12.1 Daniel Stenberg curl 7.12 Daniel Stenberg curl 7.11.2 Daniel Stenberg curl 7.11.1 Daniel Stenberg curl 7.11 Daniel Stenberg curl 7.10.8 Daniel Stenberg curl 7.10.7 Daniel Stenberg curl 7.10.6 Daniel Stenberg curl 7.10.5 Daniel Stenberg curl 7.10.4 Daniel Stenberg curl 7.10.3 Daniel Stenberg curl 7.10.2 Daniel Stenberg curl 7.10.1 Daniel Stenberg curl 7.10 Daniel Stenberg curl 7.9.8 Daniel Stenberg curl 7.9.7 Daniel Stenberg curl 7.9.6 Daniel Stenberg curl 7.9.5 Daniel Stenberg curl 7.9.4 Daniel Stenberg curl 7.9.3 Daniel Stenberg curl 7.9.2 Daniel Stenberg curl 7.9.1 Daniel Stenberg curl 7.9 Daniel Stenberg curl 7.8.2 + RedHat Advanced Workstation for the Itanium Processor 2.1 + RedHat Enterprise Linux AS 2.1 IA64 + RedHat Enterprise Linux AS 2.1 + RedHat Enterprise Linux ES 2.1 IA64 + RedHat Enterprise Linux ES 2.1 + RedHat Enterprise Linux WS 2.1 IA64 + RedHat Enterprise Linux WS 2.1 Daniel Stenberg curl 7.8.1 Daniel Stenberg curl 7.8 Daniel Stenberg curl 7.7.3 Daniel Stenberg curl 7.7.2 Daniel Stenberg curl 7.7.1 Daniel Stenberg curl 7.7 Daniel Stenberg curl 7.6.1 Daniel Stenberg curl 7.6 Daniel Stenberg curl 7.5.2 Daniel Stenberg curl 7.5.1 Daniel Stenberg curl 7.5 Daniel Stenberg curl 7.4.2 Daniel Stenberg curl 7.4.1 Daniel Stenberg curl 7.4 Daniel Stenberg curl 7.3 Daniel Stenberg curl 7.2.1 Daniel Stenberg curl 7.2 Daniel Stenberg curl 7.1.1 Daniel Stenberg curl 7.1 Daniel Stenberg curl 7.16.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.6 Apple Mac OS X 10.5
Not Vulnerable:	VMWare vMA 4.0 Patch 2 Daniel Stenberg curl 7.19.6 Apple Mac OS X Server 10.6.3 Apple Mac OS X 10.6.3

cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

cURL and libcURL are prone to a security-bypass vulnerability because they fail to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones.

This issue affects cURL and libcURL when compiled against OpenSSL.

Successful exploits allow attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

cURL and libcURL 7.4 through 7.19.5 are vulnerable. Additional applications that use the affected library may also be vulnerable.

cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Attackers use man-in-the-middle attacks to exploit this issue.

cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu curl_7.18.2-1ubuntu4.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/curl/curl_7.18.2-1ubuntu4.4_powerp c.deb


• Ubuntu libcurl3-dbg_7.18.2-1ubuntu4.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-dbg_7.18.2-1ubuntu4. 4_powerpc.deb


• Ubuntu libcurl3-gnutls_7.18.2-1ubuntu4.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-gnutls_7.18.2-1ubunt u4.4_powerpc.deb


• Ubuntu libcurl3_7.18.2-1ubuntu4.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3_7.18.2-1ubuntu4.4_po werpc.deb


• Ubuntu libcurl4-gnutls-dev_7.18.2-1ubuntu4.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-gnutls-dev_7.18.2-1u buntu4.4_powerpc.deb


• Ubuntu libcurl4-openssl-dev_7.18.2-1ubuntu4.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-openssl-dev_7.18.2-1 ubuntu4.4_powerpc.deb

Slackware Linux 12.2

• Slackware curl-7.19.6-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ curl-7.19.6-i486-1_slack12.2.tgz

Debian Linux 5.0 alpha

• Debian libcurl3-dbg_7.18.2-8lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny2_alpha.deb


• Debian libcurl3-dbg_7.18.2-8lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny3_alpha.deb


• Debian libcurl3-gnutls_7.18.2-8lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny2_alpha.deb


• Debian libcurl3-gnutls_7.18.2-8lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny3_alpha.deb


• Debian libcurl3_7.18.2-8lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny2_alpha.deb


• Debian libcurl3_7.18.2-8lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny3_alpha.deb

MandrakeSoft Linux Mandrake 2008.0

• Mandriva curl-7.16.4-2.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl-devel-7.16.4-2.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl4-7.16.4-2.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu curl_7.18.2-8ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/curl_7.18.2-8ubuntu4.1_sparc. deb


• Ubuntu libcurl3-dbg_7.18.2-8ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-dbg_7.18.2-8ubuntu4. 1_sparc.deb


• Ubuntu libcurl3-gnutls_7.18.2-8ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-gnutls_7.18.2-8ubunt u4.1_sparc.deb


• Ubuntu libcurl3_7.18.2-8ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3_7.18.2-8ubuntu4.1_sp arc.deb


• Ubuntu libcurl4-gnutls-dev_7.18.2-8ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-gnutls-dev_7.18.2-8u buntu4.1_sparc.deb


• Ubuntu libcurl4-openssl-dev_7.18.2-8ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-openssl-dev_7.18.2-8 ubuntu4.1_sparc.deb

Debian Linux 4.0 amd64

• Debian libcurl3-dbg_7.15.5-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch2_amd64.deb


• Debian libcurl3-dbg_7.15.5-1etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch3_amd64.deb


• Debian libcurl3-dev_7.15.5-1etch2_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch2_all.deb


• Debian libcurl3-dev_7.15.5-1etch3_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch3_all.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch2_amd64.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch3_amd64.deb


• Debian libcurl3-gnutls_7.15.5-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch2_amd64.deb


• Debian libcurl3-gnutls_7.15.5-1etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch3_amd64.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch2_amd64.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch3_amd64.deb


• Debian libcurl3_7.15.5-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch2_amd64.deb


• Debian libcurl3_7.15.5-1etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch3_amd64.deb

Debian Linux 4.0 ia-32

• Debian libcurl3-dbg_7.15.5-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch2_i386.deb


• Debian libcurl3-dbg_7.15.5-1etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch3_i386.deb


• Debian libcurl3-dev_7.15.5-1etch2_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch2_all.deb


• Debian libcurl3-dev_7.15.5-1etch3_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch3_all.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch2_i386.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch3_i386.deb


• Debian libcurl3-gnutls_7.15.5-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch2_i386.deb


• Debian libcurl3-gnutls_7.15.5-1etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch3_i386.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch2_i386.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch3_i386.deb


• Debian libcurl3_7.15.5-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch2_i386.deb


• Debian libcurl3_7.15.5-1etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch3_i386.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu curl_7.18.2-1ubuntu4.4_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/curl_7.18.2-1ubuntu4.4_sparc. deb


• Ubuntu libcurl3-dbg_7.18.2-1ubuntu4.4_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-dbg_7.18.2-1ubuntu4. 4_sparc.deb


• Ubuntu libcurl3-gnutls_7.18.2-1ubuntu4.4_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-gnutls_7.18.2-1ubunt u4.4_sparc.deb


• Ubuntu libcurl3_7.18.2-1ubuntu4.4_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3_7.18.2-1ubuntu4.4_sp arc.deb


• Ubuntu libcurl4-gnutls-dev_7.18.2-1ubuntu4.4_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-gnutls-dev_7.18.2-1u buntu4.4_sparc.deb


• Ubuntu libcurl4-openssl-dev_7.18.2-1ubuntu4.4_sparc.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-openssl-dev_7.18.2-1 ubuntu4.4_sparc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu curl_7.18.2-8ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/curl_7.18.2-8ubuntu4.1_lpia.d eb


• Ubuntu libcurl3-dbg_7.18.2-8ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-dbg_7.18.2-8ubuntu4. 1_lpia.deb


• Ubuntu libcurl3-gnutls_7.18.2-8ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-gnutls_7.18.2-8ubunt u4.1_lpia.deb


• Ubuntu libcurl3_7.18.2-8ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3_7.18.2-8ubuntu4.1_lp ia.deb


• Ubuntu libcurl4-gnutls-dev_7.18.2-8ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-gnutls-dev_7.18.2-8u buntu4.1_lpia.deb


• Ubuntu libcurl4-openssl-dev_7.18.2-8ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-openssl-dev_7.18.2-8 ubuntu4.1_lpia.deb

Debian Linux 5.0 armel

• Debian libcurl3-dbg_7.18.2-8lenny2_armel.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny2_armel.deb


• Debian libcurl3-dbg_7.18.2-8lenny3_armel.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny3_armel.deb


• Debian libcurl3-gnutls_7.18.2-8lenny2_armel.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny2_armel.deb


• Debian libcurl3-gnutls_7.18.2-8lenny3_armel.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny3_armel.deb


• Debian libcurl3_7.18.2-8lenny2_armel.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny2_armel.deb


• Debian libcurl3_7.18.2-8lenny3_armel.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny3_armel.deb

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.3.dmg
  http://www.apple.com/support/downloads/

MandrakeSoft Linux Mandrake 2009.0 x86_64

• Mandriva curl-7.19.0-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva curl-examples-7.19.0-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64curl-devel-7.19.0-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64curl4-7.19.0-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian libcurl3-dbg_7.18.2-8lenny2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny2_mips.deb


• Debian libcurl3-dbg_7.18.2-8lenny3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny3_mips.deb


• Debian libcurl3-gnutls_7.18.2-8lenny2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny2_mips.deb


• Debian libcurl3-gnutls_7.18.2-8lenny3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny3_mips.deb


• Debian libcurl3_7.18.2-8lenny2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny2_mips.deb


• Debian libcurl3_7.18.2-8lenny3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny3_mips.deb

VMWare ESX Server 4.0

• VMWare ESX-4.0.0-update01.zip
  https://hostupdate.vmware.com/software/VUM/OFFLINE/release-158-2009111 8-187517/ESX-4.0.0-update01.zip

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu curl_7.18.2-8ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.18.2-8ubuntu 4.1_amd64.deb


• Ubuntu libcurl3-dbg_7.18.2-8ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.18.2 -8ubuntu4.1_amd64.deb


• Ubuntu libcurl3-gnutls_7.18.2-8ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-gnutls_7.1 8.2-8ubuntu4.1_amd64.deb


• Ubuntu libcurl3_7.18.2-8ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.18.2-8ub untu4.1_amd64.deb


• Ubuntu libcurl4-gnutls-dev_7.18.2-8ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl4-gnutls-dev _7.18.2-8ubuntu4.1_amd64.deb


• Ubuntu libcurl4-openssl-dev_7.18.2-8ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl4-openssl-de v_7.18.2-8ubuntu4.1_amd64.deb

Debian Linux 4.0 mips

• Debian libcurl3-dbg_7.15.5-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch2_mips.deb


• Debian libcurl3-dbg_7.15.5-1etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch3_mips.deb


• Debian libcurl3-dev_7.15.5-1etch2_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch2_all.deb


• Debian libcurl3-dev_7.15.5-1etch3_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch3_all.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch2_mips.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch3_mips.deb


• Debian libcurl3-gnutls_7.15.5-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch2_mips.deb


• Debian libcurl3-gnutls_7.15.5-1etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch3_mips.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch2_mips.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch3_mips.deb


• Debian libcurl3_7.15.5-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch2_mips.deb


• Debian libcurl3_7.15.5-1etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch3_mips.deb

Debian Linux 5.0 sparc

• Debian libcurl3-dbg_7.18.2-8lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny2_sparc.deb


• Debian libcurl3-gnutls_7.18.2-8lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny2_sparc.deb


• Debian libcurl3_7.18.2-8lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny2_sparc.deb

MandrakeSoft Linux Mandrake 2008.1 x86_64

• Mandriva curl-7.18.0-1.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva curl-examples-7.18.0-1.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64curl-devel-7.18.0-1.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64curl4-7.18.0-1.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

• Debian libcurl3-dbg_7.15.5-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch2_arm.deb


• Debian libcurl3-dbg_7.15.5-1etch3_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch3_arm.deb


• Debian libcurl3-dev_7.15.5-1etch2_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch2_all.deb


• Debian libcurl3-dev_7.15.5-1etch3_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch3_all.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch2_arm.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch3_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch3_arm.deb


• Debian libcurl3-gnutls_7.15.5-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch2_arm.deb


• Debian libcurl3-gnutls_7.15.5-1etch3_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch3_arm.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch2_arm.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch3_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch3_arm.deb


• Debian libcurl3_7.15.5-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch2_arm.deb


• Debian libcurl3_7.15.5-1etch3_arm.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch3_arm.deb

MandrakeSoft Linux Mandrake 2008.1

• Mandriva curl-7.18.0-1.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva curl-examples-7.18.0-1.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl-devel-7.18.0-1.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl4-7.18.0-1.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

• Debian libcurl3-dbg_7.15.5-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch2_powerpc.deb


• Debian libcurl3-dbg_7.15.5-1etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch3_powerpc.deb


• Debian libcurl3-dev_7.15.5-1etch2_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch2_all.deb


• Debian libcurl3-dev_7.15.5-1etch3_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch3_all.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch2_powerpc.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch3_powerpc.deb


• Debian libcurl3-gnutls_7.15.5-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch2_powerpc.deb


• Debian libcurl3-gnutls_7.15.5-1etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch3_powerpc.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch2_powerpc.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch3_powerpc.deb


• Debian libcurl3_7.15.5-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch2_powerpc.deb


• Debian libcurl3_7.15.5-1etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch3_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu curl_7.18.2-1ubuntu4.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.18.2-1ubuntu 4.4_i386.deb


• Ubuntu libcurl3-dbg_7.18.2-1ubuntu4.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.18.2 -1ubuntu4.4_i386.deb


• Ubuntu libcurl3-gnutls_7.18.2-1ubuntu4.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-gnutls_7.1 8.2-1ubuntu4.4_i386.deb


• Ubuntu libcurl3_7.18.2-1ubuntu4.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.18.2-1ub untu4.4_i386.deb


• Ubuntu libcurl4-gnutls-dev_7.18.2-1ubuntu4.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl4-gnutls-dev _7.18.2-1ubuntu4.4_i386.deb


• Ubuntu libcurl4-openssl-dev_7.18.2-1ubuntu4.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl4-openssl-de v_7.18.2-1ubuntu4.4_i386.deb

Debian Linux 4.0 m68k

• Debian libcurl3-dev_7.15.5-1etch2_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch2_all.deb


• Debian libcurl3-dev_7.15.5-1etch3_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch3_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva curl-7.19.0-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva curl-examples-7.19.0-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl-devel-7.19.0-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl4-7.19.0-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian libcurl3-dbg_7.18.2-8lenny2_s390.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny2_s390.deb


• Debian libcurl3-gnutls_7.18.2-8lenny2_s390.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny2_s390.deb


• Debian libcurl3_7.18.2-8lenny2_s390.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny2_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu curl_7.18.0-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/curl_7.18.0-1ubuntu2.2_lpia.d eb


• Ubuntu libcurl3-dbg_7.18.0-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-dbg_7.18.0-1ubuntu2. 2_lpia.deb


• Ubuntu libcurl3-gnutls_7.18.0-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3-gnutls_7.18.0-1ubunt u2.2_lpia.deb


• Ubuntu libcurl3_7.18.0-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl3_7.18.0-1ubuntu2.2_lp ia.deb


• Ubuntu libcurl4-gnutls-dev_7.18.0-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-gnutls-dev_7.18.0-1u buntu2.2_lpia.deb


• Ubuntu libcurl4-openssl-dev_7.18.0-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/c/curl/libcurl4-openssl-dev_7.18.0-1 ubuntu2.2_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu curl_7.15.1-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.15.1-1ubuntu 3.2_i386.deb


• Ubuntu libcurl3-dbg_7.15.1-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.15.1 -1ubuntu3.2_i386.deb


• Ubuntu libcurl3-dev_7.15.1-1ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dev_7.15.1 -1ubuntu3.2_all.deb


• Ubuntu libcurl3-gnutls-dev_7.15.1-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-gnutls-dev _7.15.1-1ubuntu3.2_i386.deb


• Ubuntu libcurl3-gnutls_7.15.1-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-gnutls_7.1 5.1-1ubuntu3.2_i386.deb


• Ubuntu libcurl3-openssl-dev_7.15.1-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-openssl-de v_7.15.1-1ubuntu3.2_i386.deb


• Ubuntu libcurl3_7.15.1-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.15.1-1ub untu3.2_i386.deb

Debian Linux 5.0 hppa

• Debian libcurl3-dbg_7.18.2-8lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny2_hppa.deb


• Debian libcurl3-dbg_7.18.2-8lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.18. 2-8lenny3_hppa.deb


• Debian libcurl3-gnutls_7.18.2-8lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny2_hppa.deb


• Debian libcurl3-gnutls_7.18.2-8lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 18.2-8lenny3_hppa.deb


• Debian libcurl3_7.18.2-8lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny2_hppa.deb


• Debian libcurl3_7.18.2-8lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.18.2-8l enny3_hppa.deb

Debian Linux 4.0 sparc

• Debian libcurl3-dbg_7.15.5-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dbg_7.15. 5-1etch2_sparc.deb


• Debian libcurl3-dev_7.15.5-1etch2_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch2_all.deb


• Debian libcurl3-dev_7.15.5-1etch3_all.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-dev_7.15. 5-1etch3_all.deb


• Debian libcurl3-gnutls-dev_7.15.5-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls-de v_7.15.5-1etch2_sparc.deb


• Debian libcurl3-gnutls_7.15.5-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-gnutls_7. 15.5-1etch2_sparc.deb


• Debian libcurl3-openssl-dev_7.15.5-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3-openssl-d ev_7.15.5-1etch2_sparc.deb


• Debian libcurl3_7.15.5-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/curl/libcurl3_7.15.5-1e tch2_sparc.deb

MandrakeSoft Linux Mandrake 2009.0

• Mandriva curl-7.19.0-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva curl-examples-7.19.0-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl-devel-7.19.0-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl4-7.19.0-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu curl_7.18.0-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.18.0-1ubuntu 2.2_i386.deb


• Ubuntu libcurl3-dbg_7.18.0-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.18.0 -1ubuntu2.2_i386.deb


• Ubuntu libcurl3-gnutls_7.18.0-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-gnutls_7.1 8.0-1ubuntu2.2_i386.deb


• Ubuntu libcurl3_7.18.0-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.18.0-1ub untu2.2_i386.deb


• Ubuntu libcurl4-gnutls-dev_7.18.0-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl4-gnutls-dev _7.18.0-1ubuntu2.2_i386.deb


• Ubuntu libcurl4-openssl-dev_7.18.0-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl4-openssl-de v_7.18.0-1ubuntu2.2_i386.deb

Apple Mac OS X 10.5

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Slackware Linux 10.0

• Slackware curl-7.12.2-i486-4_slack10.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ curl-7.12.2-i486-4_slack10.0.tgz

Slackware Linux 10.2

• Slackware curl-7.12.2-i486-4_slack10.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ curl-7.12.2-i486-4_slack10.2.tgz

Apple Mac OS X 10.5.2

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.2

• Apple SecUpdSrvr2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.3

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.3

• Apple SecUpdSrvr2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.4

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.5

• Apple SecUpdSrvr2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.6

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.7

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.8

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.1

• Apple MacOSXUpdCombo10.6.3.dmg
  http://www.apple.com/support/downloads/

MandrakeSoft Corporate Server 3.0

• Mandriva curl-7.11.0-2.4.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl2-7.11.0-2.4.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libcurl2-devel-7.11.0-2.4.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

Daniel Stenberg curl 7.15.1

• Daniel Stenberg curl-7.15.1-CVE-2009-2417.patch
  http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch

Daniel Stenberg curl 7.16.4

• Daniel Stenberg curl-7.16.4-CVE-2009-2417.patch
  http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch

Slackware Linux 9.1

• Slackware curl-7.10.7-i486-4_slack9.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/c url-7.10.7-i486-4_slack9.1.tgz

cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

References:

• cURL homepage (Daniel Stenberg )
  
• Release Notes for SSH Tectia Guardian 2.0.2b and Audit Player 2.0.13 (SSH Communication Security)
  
• VMSA-2009-0016 VMware vCenter and ESX update release and VMA patch release addre (VMware Security Team )
  
• libcurl embedded zero in cert name (Project cURL)