Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2021:357-1 Important: Curl Security Updates for SLES12SP3

suse
Calendar Grey September 28, 2021
Dist Suse Esm H88
The latest security updates for SUSE/SLES12 SP3 resolve significant vulnerabilities affecting curl and ca-certificates-mozilla components.
The container suse/sles12sp3 was updated

Summary

Advisory ID: SUSE-SU-2021:3176-1 Released: Tue Sep 21 16:28:07 2021 Summary: Security update for curl Type: security Severity: moderate Advisory ID: SUSE-RU-2021:3230-1 Released: Mon Sep 27 11:19:10 2021 Summary: Recommended update for ca-certificates-mozilla Type: recommended Severity: important

Topics%20covered

Topics Covered

security advisory important security patch SUSE curl container update SLES12SP3

References

References : 1190373 1190374 1190858 CVE-2021-22946 CVE-2021-22947

1190373,1190374,CVE-2021-22946,CVE-2021-22947

This update for curl fixes the following issues:

- CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374).

- CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).

1190858

This update for ca-certificates-mozilla fixes the following issues:

- remove one of the Letsencrypt CAs DST_Root_CA_X3.pem, as it expires

September 30th 2021 and openssl certificate chain handling does not

handle this correctly in SUSE Linux Enterprise 12 and older. (bsc#1190858)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2021:357-1
Container Tags : suse/sles12sp3:2.0.2 , suse/sles12sp3:24.306 , suse/sles12sp3:latest
Container Release : 24.306
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important security patch SUSE curl container update SLES12SP3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here