| Revision Date: | 2021-05-31 | Version: | 1 |
| Title: | Security update for curl (Moderate) |
| Description: |
This update for curl fixes the following issues:
- CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933). - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Fix for SFTP uploads when it results in empty uploaded files (bsc#1177976). - Allow partial chain verification (jsc#SLE-17956).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1177976
1183933
1186114
CVE-2014-4362
CVE-2017-16899
CVE-2018-16140
CVE-2021-22876
CVE-2021-22898
SUSE-SU-2021:1809-1
|
| Platform(s): | SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP2
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed AND davfs2-1.5.4-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
curl-7.60.0-3.42.1 is installed
OR libcurl-devel-7.60.0-3.42.1 is installed
OR libcurl4-7.60.0-3.42.1 is installed
OR libcurl4-32bit-7.60.0-3.42.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
AND transfig-3.2.6a-4.6 is installed
|