Oval Definition:oval:org.opensuse.security:def:127341
Revision Date:2022-08-16Version:1
Title:Security update for curl (Important)
Description:

This update for curl fixes the following issues:

- CVE-2022-27781: Fixed an issue where curl will get stuck in an infinite loop when trying to retrieve details about a TLS server's certificate chain (bnc#1199223). - CVE-2022-27782: Fixed an issue where TLS and SSH connections would be reused even when a related option had been changed (bsc#1199224). - CVE-2022-32206: Fixed an uncontrolled memory consumption issue caused by an unbounded number of compression layers (bsc#1200735). - CVE-2022-32208: Fixed an incorrect message verification issue when performing FTP transfers using krb5 (bsc#1200737).
Family:unixClass:patch
Status:Reference(s):1199223
1199224
1200735
1200737
CVE-2022-27781
CVE-2022-27782
CVE-2022-32206
CVE-2022-32208
SUSE-SU-2022:2813-1
Platform(s):SUSE Linux Enterprise Server 12 SP4-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4-LTSS is installed
  • AND Package Information
  • curl-7.60.0-4.38.1 is installed
  • OR libcurl4-7.60.0-4.38.1 is installed
  • OR libcurl4-32bit-7.60.0-4.38.1 is installed
    • BACK