This update for axel fixes the following issues:
axel was updated to 2.17.8:
* CVE-2020-13614: SSL Certificate Hostnames were not verified (boo#1172159)
* Replaced progressbar line clearing with terminal control sequence
* Fixed parsing of Content-Disposition HTTP header
* Fixed User-Agent HTTP header never being included
Update to version 2.17.7:
- Buildsystem fixes
- Fixed release date for man-pages on BSD
- Explicitly close TCP sockets on SSL connections too
- Fixed HTTP basic auth header generation
- Changed the default progress report to "alternate output mode"
- Improved English in README.md
Update to version 2.17.6:
- Fixed handling of non-recoverable HTTP errors - Cleanup of connection setup code
- Fixed manpage reproducibility issue
- Use tracker instead of PTS from Debian
Update to version 2.17.5:
- Fixed progress indicator misalignment
- Cleaned up the wget-like progress output code
- Improved...
Read the Full AdvisoryPatch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.1:
zypper in -t patch openSUSE-2020-778=1
- openSUSE Leap 15.1 (x86_64):
axel-2.17.8-lp151.3.3.1
axel-debuginfo-2.17.8-lp151.3.3.1
axel-debugsource-2.17.8-lp151.3.3.1
https://www.suse.com/security/cve/CVE-2020-13614.html
https://bugzilla.suse.com/1172159
--