Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1734-1

Опубликовано: 24 июн. 2020
Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

  • CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option (bsc#1173027).

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
libcurl4-7.60.0-11.3.2
Container suse/sles12sp5:latest
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-Basic-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-HPC-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-HPC-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-SAP-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-SAP-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-Standard-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-EC2-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-EC2-ECS-On-Demand
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-EC2-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-EC2-SAP-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-EC2-SAP-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-GCE-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-GCE-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-GCE-SAP-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-GCE-SAP-On-Demand
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-OCI-BYOS-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
SUSE Linux Enterprise Server 12 SP5
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
libcurl4-32bit-7.60.0-11.3.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
curl-7.60.0-11.3.2
libcurl4-7.60.0-11.3.2
libcurl4-32bit-7.60.0-11.3.2
SUSE Linux Enterprise Software Development Kit 12 SP5
libcurl-devel-7.60.0-11.3.2

Ссылки

Описание

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libcurl4-7.60.0-11.3.2
Container suse/sles12sp5:latest:libcurl4-7.60.0-11.3.2
Image SLES12-SP5-Azure-BYOS:curl-7.60.0-11.3.2
Image SLES12-SP5-Azure-BYOS:libcurl4-7.60.0-11.3.2
Ссылки