Security update for curl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3739-1 Final 1 1 2020-12-10T08:17:42Z current 2020-12-10T08:17:42Z 2020-12-10T08:17:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for curl This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399). - CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles12sp5:latest-2020-3739,Image SLES12-SP5-Azure-BYOS-2020-3739,Image SLES12-SP5-Azure-Basic-On-Demand-2020-3739,Image SLES12-SP5-Azure-HPC-BYOS-2020-3739,Image SLES12-SP5-Azure-HPC-On-Demand-2020-3739,Image SLES12-SP5-Azure-SAP-BYOS-2020-3739,Image SLES12-SP5-Azure-SAP-On-Demand-2020-3739,Image SLES12-SP5-Azure-Standard-On-Demand-2020-3739,Image SLES12-SP5-EC2-BYOS-2020-3739,Image SLES12-SP5-EC2-ECS-On-Demand-2020-3739,Image SLES12-SP5-EC2-On-Demand-2020-3739,Image SLES12-SP5-EC2-SAP-BYOS-2020-3739,Image SLES12-SP5-EC2-SAP-On-Demand-2020-3739,Image SLES12-SP5-GCE-BYOS-2020-3739,Image SLES12-SP5-GCE-On-Demand-2020-3739,Image SLES12-SP5-GCE-SAP-BYOS-2020-3739,Image SLES12-SP5-GCE-SAP-On-Demand-2020-3739,Image SLES12-SP5-OCI-BYOS-BYOS-2020-3739,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2020-3739,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2020-3739,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2020-3739,SUSE-2020-3739,SUSE-SLE-SDK-12-SP5-2020-3739,SUSE-SLE-SERVER-12-SP5-2020-3739 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203739-1/ Link for SUSE-SU-2020:3739-1 https://lists.suse.com/pipermail/sle-security-updates/2020-December/007961.html E-Mail link for SUSE-SU-2020:3739-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1179398 SUSE Bug 1179398 https://bugzilla.suse.com/1179399 SUSE Bug 1179399 https://bugzilla.suse.com/1179593 SUSE Bug 1179593 https://www.suse.com/security/cve/CVE-2020-8284/ SUSE CVE CVE-2020-8284 page https://www.suse.com/security/cve/CVE-2020-8285/ SUSE CVE CVE-2020-8285 page https://www.suse.com/security/cve/CVE-2020-8286/ SUSE CVE CVE-2020-8286 page Container suse/sles12sp5:latest Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 libcurl4-7.60.0-11.9.1 curl-7.60.0-11.9.1 curl-mini-7.60.0-11.9.1 libcurl-devel-7.60.0-11.9.1 libcurl-devel-32bit-7.60.0-11.9.1 libcurl-devel-64bit-7.60.0-11.9.1 libcurl-mini-devel-7.60.0-11.9.1 libcurl4-32bit-7.60.0-11.9.1 libcurl4-64bit-7.60.0-11.9.1 libcurl4-mini-7.60.0-11.9.1 libcurl4-7.60.0-11.9.1 as a component of Container suse/sles12sp5:latest curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production curl-7.60.0-11.9.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libcurl4-7.60.0-11.9.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production curl-7.60.0-11.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 libcurl4-7.60.0-11.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 libcurl4-32bit-7.60.0-11.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 curl-7.60.0-11.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libcurl4-7.60.0-11.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libcurl4-32bit-7.60.0-11.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libcurl-devel-7.60.0-11.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. CVE-2020-8284 Container suse/sles12sp5:latest:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-Basic-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-Basic-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-Standard-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-Standard-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-ECS-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:curl-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:curl-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:libcurl4-32bit-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:curl-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libcurl4-32bit-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libcurl-devel-7.60.0-11.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203739-1/ https://www.suse.com/security/cve/CVE-2020-8284.html CVE-2020-8284 https://bugzilla.suse.com/1179398 SUSE Bug 1179398 https://bugzilla.suse.com/1179399 SUSE Bug 1179399 https://bugzilla.suse.com/1186108 SUSE Bug 1186108 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. CVE-2020-8285 Container suse/sles12sp5:latest:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-Basic-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-Basic-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-Standard-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-Standard-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-ECS-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:curl-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:curl-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:libcurl4-32bit-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:curl-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libcurl4-32bit-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libcurl-devel-7.60.0-11.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203739-1/ https://www.suse.com/security/cve/CVE-2020-8285.html CVE-2020-8285 https://bugzilla.suse.com/1179399 SUSE Bug 1179399 https://bugzilla.suse.com/1186108 SUSE Bug 1186108 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. CVE-2020-8286 Container suse/sles12sp5:latest:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-Basic-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-Basic-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-HPC-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-Azure-Standard-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-Azure-Standard-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-ECS-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-EC2-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-On-Demand:curl-7.60.0-11.9.1 Image SLES12-SP5-GCE-SAP-On-Demand:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:curl-7.60.0-11.9.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:curl-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-11.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:curl-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:libcurl4-32bit-7.60.0-11.9.1 SUSE Linux Enterprise Server 12 SP5:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:curl-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libcurl4-32bit-7.60.0-11.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libcurl4-7.60.0-11.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libcurl-devel-7.60.0-11.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203739-1/ https://www.suse.com/security/cve/CVE-2020-8286.html CVE-2020-8286 https://bugzilla.suse.com/1179593 SUSE Bug 1179593 https://bugzilla.suse.com/1186108 SUSE Bug 1186108