Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:14481-1 Resolves Moderate curl Network Vulnerability Issue

suse
Calendar Grey September 2, 2020
Dist Suse Esm H88
SUSE release addresses curl vulnerability marked as moderate; see CVE-2020-8231. Discover the steps to apply the security update promptly.
An update that fixes one vulnerability is now available

Summary

This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the wrong connection and instead pick another one the application has created since then. [bsc#1175109, CVE-2020-8231] Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SECURITY: zypper in -t patch secsp3-curl-14481=1 Package List: - SUSE Linux Enterprise Server 11-SECURITY (i586 ia64 ppc64 s390x x86_64):

Topics%20covered

Topics Covered

security advisory moderate curl network issue SUSE Linux Enterprise Server

References

#1175109

Cross- CVE-2020-8231

Affected Products:

SUSE Linux Enterprise Server 11-SECURITY

https://www.suse.com/security/cve/CVE-2020-8231.html

https://bugzilla.suse.com/1175109

Announcement ID: SUSE-SU-2020:14481-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate curl network issue SUSE Linux Enterprise Server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here