shield Security update for curl

SUSE-SLE-Module-Basesystem-15-SP3-2022-1657

This update for curl fixes the following issues: - CVE-2022-27776: Fixed auth/cookie leak on redirect (bsc#1198766) - CVE-2022-27775: Fixed bad local IPv6 connection reuse (bsc#1198723) - CVE-2022-22576: Fixed OAUTH2 bearer bypass in connection re-use (bsc#1198614)

• Release Date
  May 13 2022
• References
  Bugzilla: 1198723, 1198614, 1198766
  CVEs: CVE-2022-22576, CVE-2022-27775, CVE-2022-27776
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.3 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-150200.4.30.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-150200.4.30.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-150200.4.30.1 lock rpm

Basesystem Module 15.3 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-150200.4.30.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-150200.4.30.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-150200.4.30.1 lock rpm

Basesystem Module 15.3 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-150200.4.30.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-150200.4.30.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-150200.4.30.1 lock rpm

Basesystem Module 15.3 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.66.0-150200.4.30.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.66.0-150200.4.30.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.66.0-150200.4.30.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  7.66.0-150200.4.30.1 lock rpm