The assessed status of all versions of Revenera’s products that are still supported (that is, they have not yet reached their End of Life). Product lifecycle dates can be found at https://docs.revenera.com/eol/default.htm.
Once specific details regarding the impacted versions of cURL are released on October 11th, we will reconcile that with our analysis and provide further updates on any necessary remediation work. Please subscribe to this page to be notified of subsequent updates.
As always, security patches tend to take a few attempts to fully resolve, so keep an eye our for subsequent patches as more exploit scenarios are uncovered and/or additional security issues are reported.
Also, even if you are not a software supplier, don’t forget to check your servers as you likely have cURL installed on them in your data center. Make sure you upgrade all instances to the appropriate "latest" version as patches are released.
Finally, do not forget to check derivative projects that were base on or ported from cURL for impact... i.e., pycurl, python-pycurl, and others.
@clementlee - Our product teams are actively assessing potential exposure to the cURL vulnerabilities and are preparing an update for those that have completed their assessment so far.
For now, I've confirmed with the FlexNet Publisher team that FlexNet Publisher does not package or use cURL in either the client or server.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
