gpp_maybe Security update for curl

SUSE-SLE-Module-Basesystem-15-SP4-2023-429

This update for curl fixes the following issues: - CVE-2023-23914: Fixed HSTS ignored on multiple requests (bsc#1207990). - CVE-2023-23915: Fixed HSTS amnesia with --parallel (bsc#1207991). - CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).

• Release Date
  Feb 15 2023
• References
  Bugzilla: 1207991, 1207992, 1207990
  CVEs: CVE-2023-23914, CVE-2023-23916, CVE-2023-23915
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.79.1-150400.5.15.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.79.1-150400.5.15.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.79.1-150400.5.15.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  7.79.1-150400.5.15.1 lock rpm

Basesystem Module 15.4 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.79.1-150400.5.15.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.79.1-150400.5.15.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.79.1-150400.5.15.1 lock rpm

Basesystem Module 15.4 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.79.1-150400.5.15.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.79.1-150400.5.15.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.79.1-150400.5.15.1 lock rpm

Basesystem Module 15.4 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  7.79.1-150400.5.15.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  7.79.1-150400.5.15.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  7.79.1-150400.5.15.1 lock rpm