Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:771-1 Moderate: Curl Security Update Advisory

suse
Calendar Grey December 11, 2020
Dist Suse Esm H88
Patch notification for openSUSE: opensuse/leap15.3 resolves low-risk security vulnerabilities.
The container suse/sles12sp5 was updated

Summary

-----------------------------------------------------------------Advisory ID: SUSE-SU-2020:3739-1 Released: Thu Dec 10 09:17:34 2020 Summary: Security update for curl Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue moderate severity suse curl curl update OSCP verification container update

References

References : 1179398 1179399 1179593 CVE-2020-8284 CVE-2020-8285 CVE-2020-8286

1179398,1179399,1179593,CVE-2020-8284,CVE-2020-8285,CVE-2020-8286

This update for curl fixes the following issues:

- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593).

- CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399).

- CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).

-----------------------------------------------------------------Container Advisory ID : SUSE-CU-2020:771-1
Container Tags : suse/sles12sp5:6.5.106 , suse/sles12sp5:latest
Container Release : 6.5.106
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate security issue moderate severity suse curl curl update OSCP verification container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here