此更新修复了 curl 的以下安全问题：

- bnc#858673：重用错误的 HTTP NTLM 连接 (CVE-2014-0015)

- bnc#862144：修复因过期的 cookie 造成的测试失败

根据 Web 服务器标题，远程 Web 服务器上托管的 HP System Management Homepage (SMH) 版本低于 7.2.6。因此，它受到多个组件与第三方库中的多种漏洞影响，包括远程代码执行漏洞：

- HP SMH (XSRF)
 - libcurl
 - OpenSSL

The remote host is running a version of Mac OS X that is older than 10.9.4, and is thus missing security-related fixes for the following components:

  - Certificate Trust Policy
  - copyfile
  - curl
  - Dock
  - Graphics Driver
  - iBooks Commerce
  - Intel Graphics Driver
  - Intel Compute
  - IOAcceleratorFamily
  - IOReporting
  - Keychain
  - launchd
  - Secure Transport
  - Thunderbolt

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

ID	名稱	產品	系列	已發布	已更新	嚴重性
75261	openSUSE 安全更新：curl (openSUSE-SU-2014:0267-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
90251	HP System Management Homepage < 7.2.6 多种漏洞 (FREAK)	Nessus	Web Servers	2016/3/29	2022/4/11	high
8321	Mac OS X < 10.9.4 Multiple Vulnerabilities (Security Update 2014-003)	Nessus Network Monitor	Web Clients	2014/7/2	2019/3/6	critical

偵測

搜尋 Plugin

medium

high

critical