Oval Definition:oval:org.opensuse.security:def:70224
Revision Date:2021-05-31Version:1
Title:Security update for curl (Moderate)
Description:

This update for curl fixes the following issues:

- CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933). - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Fix for SFTP uploads when it results in empty uploaded files (bsc#1177976). - Allow partial chain verification (jsc#SLE-17956).
Family:unixClass:patch
Status:Reference(s):1177976
1183933
1186114
CVE-2014-4362
CVE-2017-16899
CVE-2018-16140
CVE-2021-22876
CVE-2021-22898
SUSE-SU-2021:1809-1
Platform(s):SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND davfs2-1.5.4-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • curl-7.60.0-3.42.1 is installed
  • OR libcurl-devel-7.60.0-3.42.1 is installed
  • OR libcurl4-7.60.0-3.42.1 is installed
  • OR libcurl4-32bit-7.60.0-3.42.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND transfig-3.2.6a-4.6 is installed
  • BACK