Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

SUSE: 2020:769-1 Critical Patch Released for OpenSSL and Curl Issues

suse
Calendar Grey December 10, 2020
Dist Suse Esm H88
SUSE-sle15 Docker Notification: Updates encompass resolutions for OpenSSL and curl featuring crucial security enhancements.
The container suse/sle15 was updated

Summary

-----------------------------------------------------------------Advisory ID: SUSE-SU-2020:3720-1 Released: Wed Dec 9 13:36:26 2020 Summary: Security update for openssl-1_1 Type: security Severity: important -----------------------------------------------------------------Advisory ID: SUSE-SU-2020:3733-1 Released: Wed Dec 9 18:18:35 2020 Summary: Security update for curl Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory security update important suse openssl curl container update container advisory

References

References : 1179398 1179399 1179491 1179593 CVE-2020-1971 CVE-2020-8284 CVE-2020-8285

CVE-2020-8286

1179491,CVE-2020-1971

This update for openssl-1_1 fixes the following issues:

- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).

1179398,1179399,1179593,CVE-2020-8284,CVE-2020-8285,CVE-2020-8286

This update for curl fixes the following issues:

- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593).

- CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399).

- CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).

Severity
important
Lowest
Low
Medium
High
Critical

-----------------------------------------------------------------Container Advisory ID : SUSE-CU-2020:769-1
Container Tags : suse/sle15:15.1 , suse/sle15:15.1.6.2.367
Container Release : 6.2.367
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update important suse openssl curl container update container advisory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.