Security update for curl (important)

An update that fixes two vulnerabilities is now available.

Description:

This update for curl fixes the following issues:

• CVE-2020-8177: Fixed an issue where curl could have been tricked by a
  malicious server to overwrite a local file when using the -J option
  (bsc#1173027).
• CVE-2020-8169: Fixed an issue where could have led to partial password
  leak
  over DNS on HTTP redirect (bsc#1173026).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2020-883=1