SUSE-SU-2021:1786-1

Dashboard / Vulnerabilities / SUSE-SU-2021:1786-1

SUSE-SU-2021:1786-1

Summary: Security update for curl

Details: This update for curl fixes the following issues: - CVE-2021-22898: TELNET stack contents disclosure (bsc#1186114) - CVE-2021-22876: The automatic referer leaks credentials (bsc#1183933) - CVE-2020-8286: Inferior OCSP verification (bsc#1179593) - CVE-2020-8285: FTP wildcard stack overflow (bsc#1179399) - CVE-2020-8284: Trusting FTP PASV responses (bsc#1179398) - CVE-2020-8231: libcurl will pick and use the wrong connection with multiple requests with libcurl's multi API and the 'CURLOPT_CONNECT_ONLY' option (bsc#1175109) - Fix: SFTP uploads result in empty uploaded files (bsc#1177976)

References: https://www.suse.com/support/update/announcement/2021/suse-su-20211786-1/, https://bugzilla.suse.com/1175109, https://bugzilla.suse.com/1177976, https://bugzilla.suse.com/1179398, https://bugzilla.suse.com/1179399, https://bugzilla.suse.com/1179593, https://bugzilla.suse.com/1183933, https://bugzilla.suse.com/1186114, https://www.suse.com/security/cve/CVE-2020-8231, https://www.suse.com/security/cve/CVE-2020-8284, https://www.suse.com/security/cve/CVE-2020-8285, https://www.suse.com/security/cve/CVE-2020-8286, https://www.suse.com/security/cve/CVE-2021-22876, https://www.suse.com/security/cve/CVE-2021-22898