gpp_maybe Security update for curl

SUSE-SLE-Module-Basesystem-15-SP2-2020-1733

This update for curl fixes the following issues: - CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option (bsc#1173027). - CVE-2020-8169: Fixed an issue where could have led to partial password leak over DNS on HTTP redirect (bsc#1173026).

• Release Date
  Jun 24 2020
• References
  Bugzilla: 1173026, 1173027
  CVEs: CVE-2020-8177, CVE-2020-8169
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.2 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.3.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.3.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.3.1 lock rpm

Basesystem Module 15.2 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.3.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.3.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.3.1 lock rpm

Basesystem Module 15.2 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.3.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.3.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.3.1 lock rpm

Basesystem Module 15.2 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.3.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.3.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.3.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  7.66.0-4.3.1 lock rpm