Security update for curl
This update for curl fixes the following issues: - CVE-2021-22898: TELNET stack contents disclosure (bsc#1186114) - CVE-2021-22876: The automatic referer leaks credentials (bsc#1183933) - CVE-2020-8286: Inferior OCSP verification (bsc#1179593) - CVE-2020-8285: FTP wildcard stack overflow (bsc#1179399) - CVE-2020-8284: Trusting FTP PASV responses (bsc#1179398) - CVE-2020-8231: libcurl will pick and use the wrong connection with multiple requests with libcurl's multi API and the 'CURLOPT_CONNECT_ONLY' option (bsc#1175109) - Fix: SFTP uploads result in empty uploaded files (bsc#1177976)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for curl fixes the following issues: - CVE-2021-22898: TELNET stack contents disclosure (bsc#1186114) - CVE-2021-22876: The automatic referer leaks credentials (bsc#1183933) - CVE-2020-8286: Inferior OCSP verification (bsc#1179593) - CVE-2020-8285: FTP wildcard stack overflow (bsc#1179399) - CVE-2020-8284: Trusting FTP PASV responses (bsc#1179398) - CVE-2020-8231: libcurl will pick and use the wrong connection with multiple requests with libcurl's multi API and the 'CURLOPT_CONNECT_ONLY' option (bsc#1175109) - Fix: SFTP uploads result in empty uploaded files (bsc#1177976)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1175109
- https://bugzilla.suse.com/1177976
- https://bugzilla.suse.com/1179398
- https://bugzilla.suse.com/1179399
- https://bugzilla.suse.com/1179593
- https://bugzilla.suse.com/1183933
- https://bugzilla.suse.com/1186114
- https://www.suse.com/security/cve/CVE-2020-8231
- https://www.suse.com/security/cve/CVE-2020-8284
- https://www.suse.com/security/cve/CVE-2020-8285
- https://www.suse.com/security/cve/CVE-2020-8286
- https://www.suse.com/security/cve/CVE-2021-22876
- https://www.suse.com/security/cve/CVE-2021-22898
- https://www.suse.com/support/update/announcement/2021/suse-su-20211786-1/