Security update for curl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2440-1 Final 1 1 2021-07-21T11:48:57Z current 2021-07-21T11:48:57Z 2021-07-21T11:48:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for curl This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credentials. (bsc#1188218) - CVE-2021-22922: Wrong content via metalink not discarded. (bsc#1188217) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/389-ds:1.4.2-2021-2440,Container caasp/v4/busybox:1.34.1-2021-2440,Container caasp/v4/caasp-dex:2.16.0-2021-2440,Container caasp/v4/cert-exporter:2.3.0-2021-2440,Container caasp/v4/cilium-etcd-operator:2.0.5-2021-2440,Container caasp/v4/cilium-init:1.5.3-2021-2440,Container caasp/v4/cilium-operator:1.6.6-2021-2440,Container caasp/v4/cilium:1.6.6-2021-2440,Container caasp/v4/cloud-provider-openstack:1.15.0-2021-2440,Container caasp/v4/configmap-reload:0.3.0-2021-2440,Container caasp/v4/coredns:1.6.7-2021-2440,Container caasp/v4/curl:7.60.0-2021-2440,Container caasp/v4/etcd:3.4.13-2021-2440,Container caasp/v4/gangway:3.1.0-2021-2440,Container caasp/v4/grafana:7.5.12-2021-2440,Container caasp/v4/helm-tiller:2.16.12-2021-2440,Container caasp/v4/hyperkube:v1.17.17-2021-2440,Container caasp/v4/k8s-sidecar:0.1.75-2021-2440,Container caasp/v4/kube-state-metrics:1.9.3-2021-2440,Container caasp/v4/kubernetes-client:1.17.17-2021-2440,Container caasp/v4/kucero:1.3.0-2021-2440,Container caasp/v4/kured:1.3.0-2021-2440,Container caasp/v4/metrics-server:0.3.6-2021-2440,Container caasp/v4/prometheus-alertmanager:0.16.2-2021-2440,Container caasp/v4/prometheus-node-exporter:1.1.2-2021-2440,Container caasp/v4/prometheus-pushgateway:0.6.0-2021-2440,Container caasp/v4/prometheus-server:2.7.1-2021-2440,Container caasp/v4/rsyslog:8.39.0-2021-2440,Container caasp/v4/skuba-tooling:0.1.0-2021-2440,Container caasp/v4/test-update:beta-2021-2440,Container caasp/v4/velero-plugin-for-aws:1.0.1-2021-2440,Container caasp/v4/velero-plugin-for-gcp:1.0.1-2021-2440,Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1-2021-2440,Container caasp/v4/velero-restic-restore-helper:1.3.1-2021-2440,Container caasp/v4/velero:1.3.1-2021-2440,Container ses/6/cephcsi/cephcsi:latest-2021-2440,Container ses/6/rook/ceph:latest-2021-2440,Container suse/sle15:15.0-2021-2440,Container suse/sle15:15.1-2021-2440,Image SLES15-Azure-BYOS-2021-2440,Image SLES15-EC2-CHOST-HVM-BYOS-2021-2440,Image SLES15-EC2-HVM-BYOS-2021-2440,Image SLES15-GCE-BYOS-2021-2440,Image SLES15-SAP-Azure-2021-2440,Image SLES15-SAP-Azure-BYOS-2021-2440,Image SLES15-SAP-Azure-LI-BYOS-Production-2021-2440,Image SLES15-SAP-Azure-VLI-BYOS-Production-2021-2440,Image SLES15-SAP-EC2-HVM-2021-2440,Image SLES15-SAP-EC2-HVM-BYOS-2021-2440,Image SLES15-SAP-GCE-2021-2440,Image SLES15-SAP-GCE-BYOS-2021-2440,Image SLES15-SP1-Azure-BYOS-2021-2440,Image SLES15-SP1-Azure-HPC-BYOS-2021-2440,Image SLES15-SP1-CHOST-BYOS-Azure-2021-2440,Image SLES15-SP1-CHOST-BYOS-EC2-2021-2440,Image SLES15-SP1-CHOST-BYOS-GCE-2021-2440,Image SLES15-SP1-EC2-HPC-HVM-BYOS-2021-2440,Image SLES15-SP1-EC2-HVM-BYOS-2021-2440,Image SLES15-SP1-GCE-BYOS-2021-2440,Image SLES15-SP1-SAP-Azure-2021-2440,Image SLES15-SP1-SAP-Azure-BYOS-2021-2440,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2021-2440,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2021-2440,Image SLES15-SP1-SAP-EC2-HVM-2021-2440,Image SLES15-SP1-SAP-EC2-HVM-BYOS-2021-2440,Image SLES15-SP1-SAP-GCE-2021-2440,Image SLES15-SP1-SAP-GCE-BYOS-2021-2440,Image SLES15-SP1-SAPCAL-Azure-2021-2440,Image SLES15-SP1-SAPCAL-EC2-HVM-2021-2440,Image SLES15-SP1-SAPCAL-GCE-2021-2440,SUSE-2021-2440,SUSE-SLE-Product-HPC-15-2021-2440,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2440,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2440,SUSE-SLE-Product-SLES-15-2021-2440,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2440,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2440,SUSE-SLE-Product-SLES_SAP-15-2021-2440,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2440,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2440,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2440,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2440,SUSE-Storage-6-2021-2440 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212440-1/ Link for SUSE-SU-2021:2440-1 https://lists.suse.com/pipermail/sle-security-updates/2021-July/009199.html E-Mail link for SUSE-SU-2021:2440-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1188217 SUSE Bug 1188217 https://bugzilla.suse.com/1188218 SUSE Bug 1188218 https://bugzilla.suse.com/1188219 SUSE Bug 1188219 https://bugzilla.suse.com/1188220 SUSE Bug 1188220 https://www.suse.com/security/cve/CVE-2021-22922/ SUSE CVE CVE-2021-22922 page https://www.suse.com/security/cve/CVE-2021-22923/ SUSE CVE CVE-2021-22923 page https://www.suse.com/security/cve/CVE-2021-22924/ SUSE CVE CVE-2021-22924 page https://www.suse.com/security/cve/CVE-2021-22925/ SUSE CVE CVE-2021-22925 page Container caasp/v4/389-ds:1.4.2 Container caasp/v4/busybox:1.34.1 Container caasp/v4/caasp-dex:2.16.0 Container caasp/v4/cert-exporter:2.3.0 Container caasp/v4/cilium-etcd-operator:2.0.5 Container caasp/v4/cilium-init:1.5.3 Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/cloud-provider-openstack:1.15.0 Container caasp/v4/configmap-reload:0.3.0 Container caasp/v4/coredns:1.6.7 Container caasp/v4/curl:7.60.0 Container caasp/v4/etcd:3.4.13 Container caasp/v4/gangway:3.1.0 Container caasp/v4/grafana:7.5.12 Container caasp/v4/helm-tiller:2.16.12 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container caasp/v4/kube-state-metrics:1.9.3 Container caasp/v4/kubernetes-client:1.17.17 Container caasp/v4/kucero:1.3.0 Container caasp/v4/kured:1.3.0 Container caasp/v4/metrics-server:0.3.6 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-node-exporter:1.1.2 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container caasp/v4/skuba-tooling:0.1.0 Container caasp/v4/test-update:beta Container caasp/v4/velero-plugin-for-aws:1.0.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 Container caasp/v4/velero-restic-restore-helper:1.3.1 Container caasp/v4/velero:1.3.1 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container suse/sle15:15.0 Container suse/sle15:15.1 Image SLES15-Azure-BYOS Image SLES15-EC2-CHOST-HVM-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-GCE-BYOS Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS Image SLES15-SP1-Azure-BYOS Image SLES15-SP1-Azure-HPC-BYOS Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image SLES15-SP1-EC2-HPC-HVM-BYOS Image SLES15-SP1-EC2-HVM-BYOS Image SLES15-SP1-GCE-BYOS Image SLES15-SP1-SAP-Azure Image SLES15-SP1-SAP-Azure-BYOS Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-EC2-HVM Image SLES15-SP1-SAP-EC2-HVM-BYOS Image SLES15-SP1-SAP-GCE Image SLES15-SP1-SAP-GCE-BYOS Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 libcurl4-7.60.0-3.47.1 curl-7.60.0-3.47.1 libcurl-devel-7.60.0-3.47.1 curl-mini-7.60.0-3.47.1 libcurl-devel-32bit-7.60.0-3.47.1 libcurl-devel-64bit-7.60.0-3.47.1 libcurl-mini-devel-7.60.0-3.47.1 libcurl4-32bit-7.60.0-3.47.1 libcurl4-64bit-7.60.0-3.47.1 libcurl4-mini-7.60.0-3.47.1 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/389-ds:1.4.2 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/busybox:1.34.1 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/caasp-dex:2.16.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/cert-exporter:2.3.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/cilium-init:1.5.3 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/cilium-operator:1.6.6 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/cilium:1.6.6 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/configmap-reload:0.3.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/coredns:1.6.7 curl-7.60.0-3.47.1 as a component of Container caasp/v4/curl:7.60.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/curl:7.60.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/etcd:3.4.13 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/gangway:3.1.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/grafana:7.5.12 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/helm-tiller:2.16.12 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/hyperkube:v1.17.17 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/kube-state-metrics:1.9.3 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/kubernetes-client:1.17.17 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/kucero:1.3.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/kured:1.3.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/metrics-server:0.3.6 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/prometheus-server:2.7.1 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/rsyslog:8.39.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/skuba-tooling:0.1.0 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/test-update:beta libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 libcurl4-7.60.0-3.47.1 as a component of Container caasp/v4/velero:1.3.1 libcurl4-7.60.0-3.47.1 as a component of Container ses/6/cephcsi/cephcsi:latest libcurl4-7.60.0-3.47.1 as a component of Container ses/6/rook/ceph:latest libcurl4-7.60.0-3.47.1 as a component of Container suse/sle15:15.0 libcurl4-7.60.0-3.47.1 as a component of Container suse/sle15:15.1 curl-7.60.0-3.47.1 as a component of Image SLES15-Azure-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-Azure-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-EC2-CHOST-HVM-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-EC2-CHOST-HVM-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-EC2-HVM-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-EC2-HVM-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-GCE-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-GCE-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-EC2-HVM libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-EC2-HVM curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-GCE libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-GCE curl-7.60.0-3.47.1 as a component of Image SLES15-SAP-GCE-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SAP-GCE-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-Azure-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-Azure-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-Azure-HPC-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-Azure-HPC-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-GCE-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-GCE-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-EC2-HVM libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-EC2-HVM curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-GCE libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-GCE curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-Azure libcurl-devel-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-Azure libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-Azure curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libcurl-devel-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM curl-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-GCE libcurl-devel-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-GCE libcurl4-7.60.0-3.47.1 as a component of Image SLES15-SP1-SAPCAL-GCE curl-7.60.0-3.47.1 as a component of SUSE Enterprise Storage 6 libcurl-devel-7.60.0-3.47.1 as a component of SUSE Enterprise Storage 6 libcurl4-7.60.0-3.47.1 as a component of SUSE Enterprise Storage 6 libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Enterprise Storage 6 curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15-LTSS libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server 15-LTSS curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 curl-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl-devel-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl4-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 curl-7.60.0-3.47.1 as a component of SUSE Manager Proxy 4.0 libcurl-devel-7.60.0-3.47.1 as a component of SUSE Manager Proxy 4.0 libcurl4-7.60.0-3.47.1 as a component of SUSE Manager Proxy 4.0 libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Manager Proxy 4.0 curl-7.60.0-3.47.1 as a component of SUSE Manager Retail Branch Server 4.0 libcurl-devel-7.60.0-3.47.1 as a component of SUSE Manager Retail Branch Server 4.0 libcurl4-7.60.0-3.47.1 as a component of SUSE Manager Retail Branch Server 4.0 libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Manager Retail Branch Server 4.0 curl-7.60.0-3.47.1 as a component of SUSE Manager Server 4.0 libcurl-devel-7.60.0-3.47.1 as a component of SUSE Manager Server 4.0 libcurl4-7.60.0-3.47.1 as a component of SUSE Manager Server 4.0 libcurl4-32bit-7.60.0-3.47.1 as a component of SUSE Manager Server 4.0 When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk. CVE-2021-22922 Container caasp/v4/389-ds:1.4.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/busybox:1.34.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/caasp-dex:2.16.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cert-exporter:2.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-etcd-operator:2.0.5:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-init:1.5.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-operator:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cloud-provider-openstack:1.15.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/configmap-reload:0.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/coredns:1.6.7:libcurl4-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:curl-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/etcd:3.4.13:libcurl4-7.60.0-3.47.1 Container caasp/v4/gangway:3.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/grafana:7.5.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/helm-tiller:2.16.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/hyperkube:v1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/k8s-sidecar:0.1.75:libcurl4-7.60.0-3.47.1 Container caasp/v4/kube-state-metrics:1.9.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/kubernetes-client:1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/kucero:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/kured:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/metrics-server:0.3.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-alertmanager:0.16.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-node-exporter:1.1.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-pushgateway:0.6.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-server:2.7.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/rsyslog:8.39.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/skuba-tooling:0.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/test-update:beta:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero:1.3.1:libcurl4-7.60.0-3.47.1 Container ses/6/cephcsi/cephcsi:latest:libcurl4-7.60.0-3.47.1 Container ses/6/rook/ceph:latest:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.0:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.1:libcurl4-7.60.0-3.47.1 Image SLES15-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl4-7.60.0-3.47.1 SUSE Enterprise Storage 6:curl-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl-devel-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-32bit-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-7.60.0-3.47.1 SUSE Manager Proxy 4.0:curl-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-7.60.0-3.47.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212440-1/ https://www.suse.com/security/cve/CVE-2021-22922.html CVE-2021-22922 https://bugzilla.suse.com/1188217 SUSE Bug 1188217 https://bugzilla.suse.com/1192447 SUSE Bug 1192447 When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user's expectations and intentions and without telling the user it happened. CVE-2021-22923 Container caasp/v4/389-ds:1.4.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/busybox:1.34.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/caasp-dex:2.16.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cert-exporter:2.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-etcd-operator:2.0.5:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-init:1.5.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-operator:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cloud-provider-openstack:1.15.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/configmap-reload:0.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/coredns:1.6.7:libcurl4-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:curl-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/etcd:3.4.13:libcurl4-7.60.0-3.47.1 Container caasp/v4/gangway:3.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/grafana:7.5.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/helm-tiller:2.16.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/hyperkube:v1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/k8s-sidecar:0.1.75:libcurl4-7.60.0-3.47.1 Container caasp/v4/kube-state-metrics:1.9.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/kubernetes-client:1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/kucero:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/kured:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/metrics-server:0.3.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-alertmanager:0.16.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-node-exporter:1.1.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-pushgateway:0.6.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-server:2.7.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/rsyslog:8.39.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/skuba-tooling:0.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/test-update:beta:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero:1.3.1:libcurl4-7.60.0-3.47.1 Container ses/6/cephcsi/cephcsi:latest:libcurl4-7.60.0-3.47.1 Container ses/6/rook/ceph:latest:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.0:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.1:libcurl4-7.60.0-3.47.1 Image SLES15-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl4-7.60.0-3.47.1 SUSE Enterprise Storage 6:curl-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl-devel-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-32bit-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-7.60.0-3.47.1 SUSE Manager Proxy 4.0:curl-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-7.60.0-3.47.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212440-1/ https://www.suse.com/security/cve/CVE-2021-22923.html CVE-2021-22923 https://bugzilla.suse.com/1188218 SUSE Bug 1188218 https://bugzilla.suse.com/1192447 SUSE Bug 1192447 libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate. CVE-2021-22924 Container caasp/v4/389-ds:1.4.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/busybox:1.34.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/caasp-dex:2.16.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cert-exporter:2.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-etcd-operator:2.0.5:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-init:1.5.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-operator:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cloud-provider-openstack:1.15.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/configmap-reload:0.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/coredns:1.6.7:libcurl4-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:curl-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/etcd:3.4.13:libcurl4-7.60.0-3.47.1 Container caasp/v4/gangway:3.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/grafana:7.5.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/helm-tiller:2.16.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/hyperkube:v1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/k8s-sidecar:0.1.75:libcurl4-7.60.0-3.47.1 Container caasp/v4/kube-state-metrics:1.9.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/kubernetes-client:1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/kucero:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/kured:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/metrics-server:0.3.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-alertmanager:0.16.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-node-exporter:1.1.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-pushgateway:0.6.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-server:2.7.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/rsyslog:8.39.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/skuba-tooling:0.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/test-update:beta:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero:1.3.1:libcurl4-7.60.0-3.47.1 Container ses/6/cephcsi/cephcsi:latest:libcurl4-7.60.0-3.47.1 Container ses/6/rook/ceph:latest:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.0:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.1:libcurl4-7.60.0-3.47.1 Image SLES15-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl4-7.60.0-3.47.1 SUSE Enterprise Storage 6:curl-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl-devel-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-32bit-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-7.60.0-3.47.1 SUSE Manager Proxy 4.0:curl-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-7.60.0-3.47.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212440-1/ https://www.suse.com/security/cve/CVE-2021-22924.html CVE-2021-22924 https://bugzilla.suse.com/1188219 SUSE Bug 1188219 https://bugzilla.suse.com/1192447 SUSE Bug 1192447 https://bugzilla.suse.com/1200196 SUSE Bug 1200196 curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application. CVE-2021-22925 Container caasp/v4/389-ds:1.4.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/busybox:1.34.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/caasp-dex:2.16.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cert-exporter:2.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-etcd-operator:2.0.5:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-init:1.5.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium-operator:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cilium:1.6.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/cloud-provider-openstack:1.15.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/configmap-reload:0.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/coredns:1.6.7:libcurl4-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:curl-7.60.0-3.47.1 Container caasp/v4/curl:7.60.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/etcd:3.4.13:libcurl4-7.60.0-3.47.1 Container caasp/v4/gangway:3.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/grafana:7.5.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/helm-tiller:2.16.12:libcurl4-7.60.0-3.47.1 Container caasp/v4/hyperkube:v1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/k8s-sidecar:0.1.75:libcurl4-7.60.0-3.47.1 Container caasp/v4/kube-state-metrics:1.9.3:libcurl4-7.60.0-3.47.1 Container caasp/v4/kubernetes-client:1.17.17:libcurl4-7.60.0-3.47.1 Container caasp/v4/kucero:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/kured:1.3.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/metrics-server:0.3.6:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-alertmanager:0.16.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-node-exporter:1.1.2:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-pushgateway:0.6.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/prometheus-server:2.7.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/rsyslog:8.39.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/skuba-tooling:0.1.0:libcurl4-7.60.0-3.47.1 Container caasp/v4/test-update:beta:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:libcurl4-7.60.0-3.47.1 Container caasp/v4/velero:1.3.1:libcurl4-7.60.0-3.47.1 Container ses/6/cephcsi/cephcsi:latest:libcurl4-7.60.0-3.47.1 Container ses/6/rook/ceph:latest:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.0:libcurl4-7.60.0-3.47.1 Container suse/sle15:15.1:libcurl4-7.60.0-3.47.1 Image SLES15-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-CHOST-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-Azure-HPC-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-EC2:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-CHOST-BYOS-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE-BYOS:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAP-GCE:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-Azure:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libcurl4-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:curl-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl-devel-7.60.0-3.47.1 Image SLES15-SP1-SAPCAL-GCE:libcurl4-7.60.0-3.47.1 SUSE Enterprise Storage 6:curl-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl-devel-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-32bit-7.60.0-3.47.1 SUSE Enterprise Storage 6:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-BCL:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server 15-LTSS:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:curl-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl-devel-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-32bit-7.60.0-3.47.1 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-7.60.0-3.47.1 SUSE Manager Proxy 4.0:curl-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Proxy 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Retail Branch Server 4.0:libcurl4-7.60.0-3.47.1 SUSE Manager Server 4.0:curl-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl-devel-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-32bit-7.60.0-3.47.1 SUSE Manager Server 4.0:libcurl4-7.60.0-3.47.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212440-1/ https://www.suse.com/security/cve/CVE-2021-22925.html CVE-2021-22925 https://bugzilla.suse.com/1188220 SUSE Bug 1188220 https://bugzilla.suse.com/1192447 SUSE Bug 1192447 https://bugzilla.suse.com/1200196 SUSE Bug 1200196