Oval Definition:oval:org.opensuse.security:def:90424
Revision Date:2020-12-09Version:1
Title:Security update for curl (Moderate)
Description:

This update for curl fixes the following issues:

- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399). - CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).
Family:unixClass:patch
Status:Reference(s):1179398
1179399
1179593
CVE-2020-8284
CVE-2020-8285
CVE-2020-8286
SUSE-SU-2020:3733-1
Platform(s):SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • curl-7.60.0-3.35.1 is installed
  • OR libcurl-devel-7.60.0-3.35.1 is installed
  • OR libcurl4-7.60.0-3.35.1 is installed
  • OR libcurl4-32bit-7.60.0-3.35.1 is installed
    • BACK