shield Security update for curl

SUSE-SL-Micro-6.2-938

This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635). - CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636). - CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638).

• Release Date
  Jun 17 2026
• References
  Bugzilla: 1262631, 1262632, 1262635, 1262636, 1262638
  CVEs: CVE-2026-4873, CVE-2026-5545, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Micro 6.2 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Micro 6.2 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Micro 6.2 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Micro 6.2 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm