shield Security update for curl

SUSE-SLE-Module-Basesystem-15-SP2-2021-1762

This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA certificates are. This allows users to verify servers using the intermediate cert only, instead of needing the whole chain. * Set FLAG_TRUSTED_FIRST unconditionally. * Do not check partial chains with CRL check.

• Release Date
  May 26 2021
• References
  Bugzilla: 1186114
  CVEs: CVE-2021-22898
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.2 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.17.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.17.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.17.1 lock rpm

Basesystem Module 15.2 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.17.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.17.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.17.1 lock rpm

Basesystem Module 15.2 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.17.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.17.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.17.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  7.66.0-4.17.1 lock rpm

Basesystem Module 15.2 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-4.17.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-4.17.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-4.17.1 lock rpm