Oval Definition:	oval:org.opensuse.security:def:59736
Revision Date: 2021-05-27 Version: 1 Title: Security update for curl (Moderate) Description: This update for curl fixes the following issues: - CVE-2021-22898: TELNET stack contents disclosure (bsc#1186114) - CVE-2021-22876: The automatic referer leaks credentials (bsc#1183933) - CVE-2020-8286: Inferior OCSP verification (bsc#1179593) - CVE-2020-8285: FTP wildcard stack overflow (bsc#1179399) - CVE-2020-8284: Trusting FTP PASV responses (bsc#1179398) - CVE-2020-8231: libcurl will pick and use the wrong connection with multiple requests with libcurl's multi API and the 'CURLOPT_CONNECT_ONLY' option (bsc#1175109) - Fix: SFTP uploads result in empty uploaded files (bsc#1177976) Family: unix Class: patch Status: Reference(s): 1037216 1060031 1075091 1075994 1077445 1077724 1077725 1077978 1082023 1082063 1082210 1083247 1083417 1083420 1083422 1083424 1083426 1085207 1086774 1086775 1086813 1086814 1086817 1086820 1087082 1087813 1091041 1099279 1103040 1104457 1110723 1120386 1124211 1129346 1130847 1131107 1133147 1136449 1137325 1141493 1144903 1146519 1146544 1146612 1149591 1153108 1153158 1153161 1153811 1154844 1155311 1155897 1156060 1157038 1157042 1157070 1157143 1157155 1157157 1157158 1157303 1157324 1157333 1157464 1157804 1157923 1158021 1158132 1158381 1158394 1158398 1158410 1158413 1158417 1158427 1158445 1158785 1158787 1158788 1158789 1158790 1158791 1158792 1158793 1158795 1158819 1158823 1158824 1158827 1158834 1158900 1158903 1158904 1159199 1159285 1159297 1159841 1159908 1159910 1159911 1159912 1160195 1162227 1162298 1162928 1162929 1162931 1163971 1164069 1164078 1164846 1165111 1165311 1165873 1165881 1165984 1165985 1167629 1168075 1168295 1168424 1168829 1168854 1170056 1170345 1170778 1172405 1175109 1177976 1178171 1178387 1179398 1179399 1179593 1183933 1186114 945190 984650 CVE-2009-1494 CVE-2011-4971 CVE-2013-0179 CVE-2013-7239 CVE-2013-7290 CVE-2013-7291 CVE-2014-3577 CVE-2015-5262 CVE-2016-1372 CVE-2016-1549 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706 CVE-2017-12652 CVE-2017-14604 CVE-2017-15710 CVE-2017-15715 CVE-2017-17969 CVE-2017-18255 CVE-2017-5715 CVE-2018-0486 CVE-2018-0489 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-1283 CVE-2018-1301 CVE-2018-1302 CVE-2018-1303 CVE-2018-1312 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 CVE-2018-15378 CVE-2018-21008 CVE-2018-5996 CVE-2018-7170 CVE-2018-7182 CVE-2018-7183 CVE-2018-7184 CVE-2018-7185 CVE-2019-10220 CVE-2019-11091 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-14615 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-15213 CVE-2019-17133 CVE-2019-18660 CVE-2019-18675 CVE-2019-18683 CVE-2019-19052 CVE-2019-19062 CVE-2019-19066 CVE-2019-19073 CVE-2019-19074 CVE-2019-19319 CVE-2019-19332 CVE-2019-19447 CVE-2019-19523 CVE-2019-19524 CVE-2019-19525 CVE-2019-19527 CVE-2019-19530 CVE-2019-19531 CVE-2019-19532 CVE-2019-19533 CVE-2019-19534 CVE-2019-19535 CVE-2019-19536 CVE-2019-19537 CVE-2019-19604 CVE-2019-19767 CVE-2019-19768 CVE-2019-19965 CVE-2019-19966 CVE-2019-20054 CVE-2019-20096 CVE-2019-3701 CVE-2019-5108 CVE-2019-7317 CVE-2019-9455 CVE-2019-9458 CVE-2019-9636 CVE-2019-9948 CVE-2020-10690 CVE-2020-10720 CVE-2020-10942 CVE-2020-11494 CVE-2020-11608 CVE-2020-11609 CVE-2020-25692 CVE-2020-2732 CVE-2020-8022 CVE-2020-8231 CVE-2020-8284 CVE-2020-8285 CVE-2020-8286 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-8992 CVE-2020-9383 CVE-2021-22876 CVE-2021-22898 SUSE-SU-2018:0464-1 SUSE-SU-2018:0708-1 SUSE-SU-2018:0720-1 SUSE-SU-2018:2058-1 SUSE-SU-2019:3060-2 SUSE-SU-2019:3311-1 SUSE-SU-2020:1791-1 SUSE-SU-2020:3149-1 SUSE-SU-2021:1786-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND binutils-2.29.1-lp150.4 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information apache2-mod_php7-7.2.5-lp151.6.3 is installed OR php7-7.2.5-lp151.6.3 is installed OR php7-bcmath-7.2.5-lp151.6.3 is installed OR php7-bz2-7.2.5-lp151.6.3 is installed OR php7-calendar-7.2.5-lp151.6.3 is installed OR php7-ctype-7.2.5-lp151.6.3 is installed OR php7-curl-7.2.5-lp151.6.3 is installed OR php7-dba-7.2.5-lp151.6.3 is installed OR php7-devel-7.2.5-lp151.6.3 is installed OR php7-dom-7.2.5-lp151.6.3 is installed OR php7-embed-7.2.5-lp151.6.3 is installed OR php7-enchant-7.2.5-lp151.6.3 is installed OR php7-exif-7.2.5-lp151.6.3 is installed OR php7-fastcgi-7.2.5-lp151.6.3 is installed OR php7-fileinfo-7.2.5-lp151.6.3 is installed OR php7-firebird-7.2.5-lp151.6.3 is installed OR php7-fpm-7.2.5-lp151.6.3 is installed OR php7-ftp-7.2.5-lp151.6.3 is installed OR php7-gd-7.2.5-lp151.6.3 is installed OR php7-gettext-7.2.5-lp151.6.3 is installed OR php7-gmp-7.2.5-lp151.6.3 is installed OR php7-iconv-7.2.5-lp151.6.3 is installed OR php7-intl-7.2.5-lp151.6.3 is installed OR php7-json-7.2.5-lp151.6.3 is installed OR php7-ldap-7.2.5-lp151.6.3 is installed OR php7-mbstring-7.2.5-lp151.6.3 is installed OR php7-mysql-7.2.5-lp151.6.3 is installed OR php7-odbc-7.2.5-lp151.6.3 is installed OR php7-opcache-7.2.5-lp151.6.3 is installed OR php7-openssl-7.2.5-lp151.6.3 is installed OR php7-pcntl-7.2.5-lp151.6.3 is installed OR php7-pdo-7.2.5-lp151.6.3 is installed OR php7-pear-7.2.5-lp151.6.3 is installed OR php7-pear-Archive_Tar-7.2.5-lp151.6.3 is installed OR php7-pgsql-7.2.5-lp151.6.3 is installed OR php7-phar-7.2.5-lp151.6.3 is installed OR php7-posix-7.2.5-lp151.6.3 is installed OR php7-readline-7.2.5-lp151.6.3 is installed OR php7-shmop-7.2.5-lp151.6.3 is installed OR php7-snmp-7.2.5-lp151.6.3 is installed OR php7-soap-7.2.5-lp151.6.3 is installed OR php7-sockets-7.2.5-lp151.6.3 is installed OR php7-sodium-7.2.5-lp151.6.3 is installed OR php7-sqlite-7.2.5-lp151.6.3 is installed OR php7-sysvmsg-7.2.5-lp151.6.3 is installed OR php7-sysvsem-7.2.5-lp151.6.3 is installed OR php7-sysvshm-7.2.5-lp151.6.3 is installed OR php7-testresults-7.2.5-lp151.6.3 is installed OR php7-tidy-7.2.5-lp151.6.3 is installed OR php7-tokenizer-7.2.5-lp151.6.3 is installed OR php7-wddx-7.2.5-lp151.6.3 is installed OR php7-xmlreader-7.2.5-lp151.6.3 is installed OR php7-xmlrpc-7.2.5-lp151.6.3 is installed OR php7-xmlwriter-7.2.5-lp151.6.3 is installed OR php7-xsl-7.2.5-lp151.6.3 is installed OR php7-zip-7.2.5-lp151.6.3 is installed OR php7-zlib-7.2.5-lp151.6.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libpng16-1.6.8-15.5 is installed OR libpng16-16-1.6.8-15.5 is installed OR libpng16-16-32bit-1.6.8-15.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND clamav-0.100.2-33.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND memcached-1.4.33-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libsolv-0.6.36-2.27.19 is installed OR libsolv-tools-0.6.36-2.27.19 is installed OR libzypp-16.20.2-27.60 is installed OR perl-solv-0.6.36-2.27.19 is installed OR python-solv-0.6.36-2.27.19 is installed OR zypper-1.13.54-18.40 is installed OR zypper-log-1.13.54-18.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information git-2.26.2-27.36 is installed OR git-core-2.26.2-27.36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libblkid1-2.29.2-3.12 is installed OR libblkid1-32bit-2.29.2-3.12 is installed OR libfdisk1-2.29.2-3.12 is installed OR libmount1-2.29.2-3.12 is installed OR libmount1-32bit-2.29.2-3.12 is installed OR libsmartcols1-2.29.2-3.12 is installed OR libuuid1-2.29.2-3.12 is installed OR libuuid1-32bit-2.29.2-3.12 is installed OR python-libmount-2.29.2-3.12 is installed OR util-linux-2.29.2-3.12 is installed OR util-linux-lang-2.29.2-3.12 is installed OR util-linux-systemd-2.29.2-3.12 is installed OR uuidd-2.29.2-3.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND kdump-0.8.16-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND Package Information libX11-1.6.2-12.12 is installed OR libX11-6-1.6.2-12.12 is installed OR libX11-6-32bit-1.6.2-12.12 is installed OR libX11-data-1.6.2-12.12 is installed OR libX11-xcb1-1.6.2-12.12 is installed OR libX11-xcb1-32bit-1.6.2-12.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND Package Information curl-7.60.0-4.20.1 is installed OR libcurl4-7.60.0-4.20.1 is installed OR libcurl4-32bit-7.60.0-4.20.1 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information git-2.12.3-27.22 is installed OR git-core-2.12.3-27.22 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND Package Information libfreebl3-3.53.1-58.48 is installed OR libfreebl3-32bit-3.53.1-58.48 is installed OR libfreebl3-hmac-3.53.1-58.48 is installed OR libfreebl3-hmac-32bit-3.53.1-58.48 is installed OR libsoftokn3-3.53.1-58.48 is installed OR libsoftokn3-32bit-3.53.1-58.48 is installed OR libsoftokn3-hmac-3.53.1-58.48 is installed OR libsoftokn3-hmac-32bit-3.53.1-58.48 is installed OR mozilla-nspr-4.25-19.15 is installed OR mozilla-nspr-32bit-4.25-19.15 is installed OR mozilla-nspr-devel-4.25-19.15 is installed OR mozilla-nss-3.53.1-58.48 is installed OR mozilla-nss-32bit-3.53.1-58.48 is installed OR mozilla-nss-certs-3.53.1-58.48 is installed OR mozilla-nss-certs-32bit-3.53.1-58.48 is installed OR mozilla-nss-devel-3.53.1-58.48 is installed OR mozilla-nss-sysinit-3.53.1-58.48 is installed OR mozilla-nss-sysinit-32bit-3.53.1-58.48 is installed OR mozilla-nss-tools-3.53.1-58.48 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information tomcat-8.0.53-29.32 is installed OR tomcat-admin-webapps-8.0.53-29.32 is installed OR tomcat-docs-webapp-8.0.53-29.32 is installed OR tomcat-el-3_0-api-8.0.53-29.32 is installed OR tomcat-javadoc-8.0.53-29.32 is installed OR tomcat-jsp-2_3-api-8.0.53-29.32 is installed OR tomcat-lib-8.0.53-29.32 is installed OR tomcat-servlet-3_1-api-8.0.53-29.32 is installed OR tomcat-webapps-8.0.53-29.32 is installed
BACK