gpp_maybe Security update for curl

SUSE-SLE-Module-Basesystem-15-SP7-2026-2925

This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413). - CVE-2026-9079: stale proxy password leak (bsc#1268415). - CVE-2026-9080: UAF after pause in socket callback (bsc#1268416). - CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417). - CVE-2026-9547: SSH improper host validation (bsc#1268420). - CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).

• Release Date
  Jul 13 2026
• References
  Bugzilla: 1262631, 1268402, 1268407, 1268409, 1268413, 1268415, 1268416, 1268417, 1268420, 1268422, 1268427
  CVEs: CVE-2026-4873, CVE-2026-8286, CVE-2026-8458, CVE-2026-8924, CVE-2026-8927, CVE-2026-9079, CVE-2026-9080, CVE-2026-9545, CVE-2026-9547, CVE-2026-10536, CVE-2026-12064
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.20.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.20.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.20.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.20.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.20.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.20.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.20.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.20.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.20.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.20.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.20.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.20.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  8.14.1-150700.7.20.1 lock rpm