shield Security update for curl

SUSE-SLE-Module-Basesystem-15-SP1-2020-3733

This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399). - CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).

• Release Date
  Dec 9 2020
• References
  Bugzilla: 1179398, 1179593, 1179399
  CVEs: CVE-2020-8284, CVE-2020-8285, CVE-2020-8286
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.1 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.35.1 lock rpm

Basesystem Module 15.1 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.35.1 lock rpm

Basesystem Module 15.1 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.35.1 lock rpm

Basesystem Module 15.1 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm lock src

  libcurl-devel
  A Tool for Transferring Data from URLs

  7.60.0-3.35.1 lock rpm

  libcurl4
  Version 4 of cURL shared library

  7.60.0-3.35.1 lock rpm

  libcurl4-32bit
  Version 4 of cURL shared library

  7.60.0-3.35.1 lock rpm