Oval Definition:
oval:org.opensuse.security:def:70486
Revision Date
:
2021-10-06
Version
:
1
Title
:
Security update for curl (Moderate)
Description
:
This update for curl fixes the following issues:
- CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
Family
:
unix
Class
:
patch
Status
:
Reference(s)
:
1174543
1177406
1178291
1190373
1190374
CVE-2020-26575
CVE-2020-28030
CVE-2021-22946
CVE-2021-22947
SUSE-SU-2020:3376-1
SUSE-SU-2021:3297-1
Platform(s)
:
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP1
Product(s)
:
Definition Synopsis
SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed
AND
Package Information
wireshark-3.2.8-3.44 is installed
OR
wireshark-devel-3.2.8-3.44 is installed
OR
wireshark-ui-qt-3.2.8-3.44 is installed
Definition Synopsis
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
AND
Package Information
dfu-tool-1.2.11-5.2 is installed
OR
fwupd-1.2.11-5.2 is installed
Definition Synopsis
SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
AND
Package Information
curl-7.60.0-25.1 is installed
OR
libcurl-devel-7.60.0-25.1 is installed
OR
libcurl4-7.60.0-25.1 is installed
OR
libcurl4-32bit-7.60.0-25.1 is installed
BACK