Oval Definition:oval:org.opensuse.security:def:99147
Revision Date:2021-10-06Version:1
Title: (Moderate)
Description:

This update for curl fixes the following issues:

- CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
Family:unixClass:patch
Status:Reference(s):1184123
1190373
1190374
1190381
CVE-2021-22946
CVE-2021-22947
CVE-2021-3781
SUSE-SU-2021:3044-1
Platform(s):Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
Product(s):
Definition Synopsis
  • Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure is installed
  • AND Package Information
  • curl-7.66.0-4.27.1 is installed
  • OR libcurl4-7.66.0-4.27.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed
  • AND Package Information
  • ghostscript-9.52-155.1 is installed
  • OR ghostscript-devel-9.52-155.1 is installed
  • OR ghostscript-x11-9.52-155.1 is installed
  • OR libspectre-devel-0.2.8-3.12.1 is installed
  • OR libspectre1-0.2.8-3.12.1 is installed
    • BACK