gpp_maybe Security update for curl

SUSE-SLE-Module-Basesystem-15-SP4-2023-2224

This update for curl adds the following feature: Update to version 8.0.1 (jsc#PED-2580) - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230). - CVE-2023-28320: siglongjmp race condition (bsc#1211231). - CVE-2023-28321: IDN wildcard matching (bsc#1211232). - CVE-2023-28322: POST-after-PUT confusion (bsc#1211233).

• Release Date
  May 17 2023
• References
  Bugzilla: 1211230, 1211233, 1211231, 1211232
  CVEs: CVE-2023-28319, CVE-2023-28320, CVE-2023-28321, CVE-2023-28322
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.0.1-150400.5.23.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.0.1-150400.5.23.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.0.1-150400.5.23.1 lock rpm

Basesystem Module 15.4 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.0.1-150400.5.23.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.0.1-150400.5.23.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.0.1-150400.5.23.1 lock rpm

Basesystem Module 15.4 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.0.1-150400.5.23.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.0.1-150400.5.23.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.0.1-150400.5.23.1 lock rpm

Basesystem Module 15.4 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.0.1-150400.5.23.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.0.1-150400.5.23.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.0.1-150400.5.23.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  8.0.1-150400.5.23.1 lock rpm