Revision Date: | 2021-05-26 | Version: | 1 |
Title: | (Moderate) |
Description: |
This update for curl fixes the following issues:
- CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA certificates are. This allows users to verify servers using the intermediate cert only, instead of needing the whole chain. * Set FLAG_TRUSTED_FIRST unconditionally. * Do not check partial chains with CRL check.
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1174075 1179914 1186114 CVE-2020-29367 CVE-2021-22898 openSUSE-SU-2020:2337-1
|
Platform(s): | Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0 SUSE Package Hub for SUSE Linux Enterprise 15 SP1
| Product(s): | |
Definition Synopsis |
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM is installed AND Package Information
curl-7.66.0-4.17.1 is installed
OR libcurl4-7.66.0-4.17.1 is installed
|
Definition Synopsis |
SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
AND Package Information
blosc-devel-1.20.1-bp152.4.3.1 is installed
OR libblosc1-1.20.1-bp152.4.3.1 is installed
|