Oval Definition:	oval:org.opensuse.security:def:5762
Revision Date: 2021-05-26 Version: 1 Title: Security update for curl (Moderate) Description: This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA certificates are. This allows users to verify servers using the intermediate cert only, instead of needing the whole chain. * Set FLAG_TRUSTED_FIRST unconditionally. * Do not check partial chains with CRL check. Family: unix Class: patch Status: Reference(s): 1164903 1181145 1181146 1186114 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 CVE-2009-3297 CVE-2009-3607 CVE-2009-3608 CVE-2009-4012 CVE-2010-0405 CVE-2010-1163 CVE-2010-1646 CVE-2010-2547 CVE-2011-0010 CVE-2011-0020 CVE-2011-0064 CVE-2011-0541 CVE-2012-0035 CVE-2012-2337 CVE-2012-4425 CVE-2013-1775 CVE-2013-1776 CVE-2013-1788 CVE-2013-1789 CVE-2013-1790 CVE-2013-4351 CVE-2013-4402 CVE-2013-4473 CVE-2013-4474 CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-3970 CVE-2014-4617 CVE-2014-9680 CVE-2015-0848 CVE-2015-1191 CVE-2015-1545 CVE-2015-1546 CVE-2015-1606 CVE-2015-1607 CVE-2015-3202 CVE-2015-3294 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 CVE-2015-6908 CVE-2015-8899 CVE-2016-10164 CVE-2017-9287 CVE-2021-22898 CVE-2021-3114 CVE-2021-3115 SUSE-SU-2021:1763-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE OpenStack Cloud 5 SUSE OpenStack Cloud 6 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information openstack-neutron-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-dhcp-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-ha-tool-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-l3-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-lbaas-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-linuxbridge-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-metadata-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-metering-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-openvswitch-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-neutron-vpn-agent-2014.2.4~a0~dev103-10.3 is installed OR openstack-nova-2014.2.4~a0~dev80-14.1 is installed OR openstack-nova-compute-2014.2.4~a0~dev80-14.1 is installed OR python-neutron-2014.2.4~a0~dev103-10.3 is installed OR python-nova-2014.2.4~a0~dev80-14.1 is installed OR python-python-memcached-1.54-2.1 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.62-60.62 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information bzip2-1.0.6-27 is installed OR libbz2-1-1.0.6-27 is installed OR libbz2-1-32bit-1.0.6-27 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libpulse-mainloop-glib0-5.0-2 is installed OR libpulse-mainloop-glib0-32bit-5.0-2 is installed OR libpulse0-5.0-2 is installed OR libpulse0-32bit-5.0-2 is installed OR pulseaudio-5.0-2 is installed OR pulseaudio-esound-compat-5.0-2 is installed OR pulseaudio-gdm-hooks-5.0-2 is installed OR pulseaudio-lang-5.0-2 is installed OR pulseaudio-module-bluetooth-5.0-2 is installed OR pulseaudio-module-gconf-5.0-2 is installed OR pulseaudio-module-jack-5.0-2 is installed OR pulseaudio-module-lirc-5.0-2 is installed OR pulseaudio-module-x11-5.0-2 is installed OR pulseaudio-module-zeroconf-5.0-2 is installed OR pulseaudio-utils-5.0-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND dnsmasq-2.76-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_14-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information MozillaFirefox-52.2.0esr-108.3 is installed OR MozillaFirefox-branding-SLE-52-31.1 is installed OR MozillaFirefox-devel-52.2.0esr-108.3 is installed OR MozillaFirefox-translations-52.2.0esr-108.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND haproxy-1.5.4-2.4 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information ctdb-4.2.4-26 is installed OR samba-4.2.4-26 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information libpacemaker3-1.1.15-19 is installed OR pacemaker-1.1.15-19 is installed OR pacemaker-cli-1.1.15-19 is installed OR pacemaker-cts-1.1.15-19 is installed OR pacemaker-remote-1.1.15-19 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information cluster-md-kmp-default-4.4.73-5 is installed OR dlm-kmp-default-4.4.73-5 is installed OR gfs2-kmp-default-4.4.73-5 is installed OR ocfs2-kmp-default-4.4.73-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND fence-agents-4.2.1+git.1537269352.7b1fd536-1 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_32-33-default-3-2 is installed OR kgraft-patch-3_12_32-33-xen-3-2 is installed OR kgraft-patch-SLE12_Update_1-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information kdelibs4-4.1.3-8.18.1 is installed OR kdelibs4-core-4.1.3-8.18.1 is installed OR libkde4-4.1.3-8.18.1 is installed OR libkde4-32bit-4.1.3-8.18.1 is installed OR libkde4-x86-4.1.3-8.18.1 is installed OR libkdecore4-4.1.3-8.18.1 is installed OR libkdecore4-32bit-4.1.3-8.18.1 is installed OR libkdecore4-x86-4.1.3-8.18.1 is installed OR utempter-0.5.5-106.18 is installed OR utempter-32bit-0.5.5-106.18 is installed OR utempter-x86-0.5.5-106.18 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND xrdp-0.4.1-28.19.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND xrdp-0.4.1-28.19.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information gstreamer-0_10-plugins-good-0.10.30-5.8.11 is installed OR gstreamer-0_10-plugins-good-doc-0.10.30-5.8.11 is installed OR gstreamer-0_10-plugins-good-lang-0.10.30-5.8.11 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information ImageMagick-6.4.3.6-7.34.1 is installed OR libMagickCore1-6.4.3.6-7.34.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.34.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-24.3.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.14 is installed OR MozillaFirefox-translations-24.3.0esr-0.8.1 is installed OR libfreebl3-3.15.4-0.7.1 is installed OR libfreebl3-32bit-3.15.4-0.7.1 is installed OR libfreebl3-x86-3.15.4-0.7.1 is installed OR libsoftokn3-3.15.4-0.7.1 is installed OR libsoftokn3-32bit-3.15.4-0.7.1 is installed OR libsoftokn3-x86-3.15.4-0.7.1 is installed OR mozilla-nss-3.15.4-0.7.1 is installed OR mozilla-nss-32bit-3.15.4-0.7.1 is installed OR mozilla-nss-tools-3.15.4-0.7.1 is installed OR mozilla-nss-x86-3.15.4-0.7.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-24.3.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.14 is installed OR MozillaFirefox-translations-24.3.0esr-0.8.1 is installed OR libfreebl3-3.15.4-0.7.1 is installed OR libfreebl3-32bit-3.15.4-0.7.1 is installed OR libfreebl3-x86-3.15.4-0.7.1 is installed OR libsoftokn3-3.15.4-0.7.1 is installed OR libsoftokn3-32bit-3.15.4-0.7.1 is installed OR libsoftokn3-x86-3.15.4-0.7.1 is installed OR mozilla-nss-3.15.4-0.7.1 is installed OR mozilla-nss-32bit-3.15.4-0.7.1 is installed OR mozilla-nss-tools-3.15.4-0.7.1 is installed OR mozilla-nss-x86-3.15.4-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information boost-license-1.36.0-12.3.1 is installed OR libboost_program_options1_36_0-1.36.0-12.3.1 is installed OR libboost_regex1_36_0-1.36.0-12.3.1 is installed OR libboost_signals1_36_0-1.36.0-12.3.1 is installed OR libboost_thread1_36_0-1.36.0-12.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information NetworkManager-0.7.1_git20090811-3.28.2 is installed OR NetworkManager-glib-0.7.1_git20090811-3.28.2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache2-mod_nss-1.0.8-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libjavascriptcoregtk-3_0-0-2.4.11-23 is installed OR libwebkitgtk-3_0-0-2.4.11-23 is installed OR libwebkitgtk3-lang-2.4.11-23 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND curl-7.60.0-11.18.1 is installed OR libcurl4-7.60.0-11.18.1 is installed OR libcurl4-32bit-7.60.0-11.18.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND curl-7.60.0-11.18.1 is installed OR libcurl4-7.60.0-11.18.1 is installed OR libcurl4-32bit-7.60.0-11.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_49-default-7-2.1 is installed OR kgraft-patch-3_12_60-52_49-xen-7-2.1 is installed OR kgraft-patch-SLE12_Update_14-7-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-71.108 is installed OR ImageMagick-config-6-SUSE-6.8.8.1-71.108 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.108 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.108 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.108 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND rubygem-actionpack-2_3-2.3.17-0.13.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information Mesa-devel-9.0.3-0.19.1 is installed OR Mesa-devel-32bit-9.0.3-0.19.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND NetworkManager-devel-0.7.1_git20090811-3.28.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND alsa-devel-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information bash-devel-4.2-75 is installed OR readline-devel-6.2-75 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND dia-0.97.3-15 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information libptexenc1-1.3.2dev-22.3 is installed OR texlive-2013.20130620-22.3 is installed OR texlive-bibtex-bin-2013.20130620.svn30088-22.3 is installed OR texlive-bin-devel-2013.20130620-22.3 is installed OR texlive-checkcites-bin-2013.20130620.svn25623-22.3 is installed OR texlive-context-bin-2013.20130620.svn29741-22.3 is installed OR texlive-cweb-bin-2013.20130620.svn30088-22.3 is installed OR texlive-dviasm-bin-2013.20130620.svn8329-22.3 is installed OR texlive-dvidvi-bin-2013.20130620.svn30088-22.3 is installed OR texlive-dviljk-bin-2013.20130620.svn30088-22.3 is installed OR texlive-dvipdfmx-bin-2013.20130620.svn30845-22.3 is installed OR texlive-dvipng-bin-2013.20130620.svn30845-22.3 is installed OR texlive-dvips-bin-2013.20130620.svn30088-22.3 is installed OR texlive-dvisvgm-bin-2013.20130620.svn30613-22.3 is installed OR texlive-gsftopk-bin-2013.20130620.svn30088-22.3 is installed OR texlive-jadetex-bin-2013.20130620.svn3006-22.3 is installed OR texlive-kpathsea-bin-2013.20130620.svn30088-22.3 is installed OR texlive-kpathsea-devel-6.2.0dev-22.3 is installed OR texlive-lacheck-bin-2013.20130620.svn30088-22.3 is installed OR texlive-latex-bin-bin-2013.20130620.svn14050-22.3 is installed OR texlive-lua2dox-bin-2013.20130620.svn29053-22.3 is installed OR texlive-luaotfload-bin-2013.20130620.svn30313-22.3 is installed OR texlive-luatex-bin-2013.20130620.svn30845-22.3 is installed OR texlive-makeindex-bin-2013.20130620.svn30088-22.3 is installed OR texlive-metafont-bin-2013.20130620.svn30088-22.3 is installed OR texlive-metapost-bin-2013.20130620.svn30845-22.3 is installed OR texlive-mfware-bin-2013.20130620.svn30088-22.3 is installed OR texlive-mptopdf-bin-2013.20130620.svn18674-22.3 is installed OR texlive-pdftex-bin-2013.20130620.svn30845-22.3 is installed OR texlive-pstools-bin-2013.20130620.svn30088-22.3 is installed OR texlive-ptexenc-devel-1.3.2dev-22.3 is installed OR texlive-seetexk-bin-2013.20130620.svn30088-22.3 is installed OR texlive-splitindex-bin-2013.20130620.svn29688-22.3 is installed OR texlive-tetex-bin-2013.20130620.svn29741-22.3 is installed OR texlive-tex-bin-2013.20130620.svn30088-22.3 is installed OR texlive-tex4ht-bin-2013.20130620.svn30088-22.3 is installed OR texlive-texconfig-bin-2013.20130620.svn29741-22.3 is installed OR texlive-thumbpdf-bin-2013.20130620.svn6898-22.3 is installed OR texlive-vlna-bin-2013.20130620.svn30088-22.3 is installed OR texlive-web-bin-2013.20130620.svn30088-22.3 is installed OR texlive-xdvi-bin-2013.20130620.svn30088-22.3 is installed OR texlive-xetex-bin-2013.20130620.svn30845-22.3 is installed OR texlive-xmltex-bin-2013.20130620.svn3006-22.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information gnome-online-accounts-3.10.5-1 is installed OR gnome-online-accounts-lang-3.10.5-1 is installed OR typelib-1_0-Goa-1_0-3.10.5-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information colord-1.1.7-5 is installed OR colord-lang-1.1.7-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-11 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-11 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-70 is installed OR libMagick++-6_Q16-3-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-70 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
BACK