shield Security update for curl

SUSE-SLE-SAP-12-SP4-2021-1786

This update for curl fixes the following issues: - CVE-2021-22898: TELNET stack contents disclosure (bsc#1186114) - CVE-2021-22876: The automatic referer leaks credentials (bsc#1183933) - CVE-2020-8286: Inferior OCSP verification (bsc#1179593) - CVE-2020-8285: FTP wildcard stack overflow (bsc#1179399) - CVE-2020-8284: Trusting FTP PASV responses (bsc#1179398) - CVE-2020-8231: libcurl will pick and use the wrong connection with multiple requests with libcurl's multi API and the 'CURLOPT_CONNECT_ONLY' option (bsc#1175109) - Fix: SFTP uploads result in empty uploaded files (bsc#1177976)

• Release Date
  May 27 2021
• References
  Bugzilla: 1179399, 1177976, 1186114, 1183933, 1175109, 1179593, 1179398
  CVEs: CVE-2020-8231, CVE-2020-8285, CVE-2020-8286, CVE-2020-8284, CVE-2021-22876, CVE-2021-22898
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-4.20.1

  lock rpm

  lock src

  libcurl4
  Version 4 of cURL shared library

  7.60.0-4.20.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.60.0-4.20.1

  lock rpm

  lock src

  libcurl4
  Version 4 of cURL shared library

  7.60.0-4.20.1

  lock rpm

  libcurl4-32bit
  Version 4 of cURL shared library

  7.60.0-4.20.1

  lock rpm