Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2021:200-1 Moderate: curl Security Update Advisory

suse
Calendar Grey May 27, 2021
Dist Suse Esm H88
The SUSE Container Update Notification delivers essential security enhancements for suse/sle15, featuring vital patches for wget.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2021:1762-1 Released: Wed May 26 12:30:01 2021 Summary: Security update for curl Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate SUSE suse curl container update curl patch

References

References : 1186114 CVE-2021-22898

1186114,CVE-2021-22898

This update for curl fixes the following issues:

- CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114).

- Allow partial chain verification [jsc#SLE-17956]

* Have intermediate certificates in the trust store be treated

as trust-anchors, in the same way as self-signed root CA

certificates are. This allows users to verify servers using

the intermediate cert only, instead of needing the whole chain.

* Set FLAG_TRUSTED_FIRST unconditionally.

* Do not check partial chains with CRL check.

Container Advisory ID : SUSE-CU-2021:200-1
Container Tags : suse/sle15:15.2 , suse/sle15:15.2.8.2.922
Container Release : 8.2.922
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate SUSE suse curl container update curl patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here